The vulnerability of the setLoginPasswordCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setLoginPasswordCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the admpass parameter. Exploiting this vulnerability allows a...