The vulnerability of the setMiniuiHomeInfoShow() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setMiniuiHomeInfoShow function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the laninfo parameter. Exploiting this...

The vulnerability of the setNtpCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A7100RU router’s microprogramming software allows a hacker to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the setNtpCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the tz parameter. Exploiting this vulnerability allows...

The vulnerability of the setVpnPassCfg() function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setVpnPassCfg function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the failure to eliminate special elements during the processing of the pptpPassThru parameter. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2022-28577

It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...