TOTOLINK A7000R Command Injection Vulnerability

The TOTOLINK A7000R is a wireless router produced by TOTOLINK Corporation. The Totolink A7000R version 4.1cu.4154 contains a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter url in the CloudACMunualUpdateUserdata function located in the...