3 matches found
CVE-2026-31167
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi...
6.5CVSS5.9AI score0.00666EPSS
SaveExploits1References1
CVE-2026-31167
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi...
6.4AI score0.00666EPSS
SaveExploits1References1
CVE-2026-31167
The ToToLink A3300R wireless router (firmware v17.0.0cu.557_B20221024 ) is vulnerable to a command injection flaw. The root cause is the failure to properly filter the mode parameter in the /cgi-bin/cstecgi.cgi endpoint. An attacker can exploit this lack of sanitization to execute arbitrary comma...
6.5CVSS6.4AI score0.00666EPSS
SaveExploits1References1Affected Software1
20