TOTOLINK A7100RU Router Command Execution

The vulnerability of the setVpnPassCfg function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the failure to eliminate special elements during the processing of the pptpPassThru parameter. Exploiting this vulnerability allows a remote attacker to execute...

TOTOLink T6 Telnet Bypass Code Execution

The vulnerability of the setTelnetCfg function in the /cgi-bin/cstecgi.cgi script of the telnet service in the mesh-system software TOTOLink T6 is related to deficiencies in the authentication process when processing the telnetEnabled parameter. Exploiting this vulnerability allows a malicious...

cstecgi.cgi Code Execution

The vulnerability of the setTracerouteCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the failure to eliminate special elements during the processing of the command parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

TOTOLINK X5000R Router setSSServer() Arbitrary Command Execution

The vulnerability of the setSSServer function in the cstecgi.cgi script of the TOTOLINK X5000R router’s software is related to the lack of measures to sanitize input data when processing parameters such as password, port, and timeout. Exploiting this vulnerability could allow an attacker to execu...