The vulnerability of the CloudSrvUserdataVersionCheck() function in TOTOLINK CP900 router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CP900 router’s software lies in the lack of measures to sanitize input data when processing parameters like url and magicid. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending...