The vulnerability of the setTelnetCfg() function in the /cgi-bin/cstecgi.cgi script of the telnet service in the mesh-system software TOTOLink T6 allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the setTelnetCfg function in the /cgi-bin/cstecgi.cgi script of the telnet service in the mesh-system software TOTOLink T6 is related to deficiencies in the authentication process when processing the telnetEnabled parameter. Exploiting this vulnerability allows a malicious...