CVE-2018-13307

The TOTOLINK A3002RU wireless router (version 1.0.8 ) is vulnerable to a system command injection flaw in the fromNtp component. Attackers can exploit the ntpServerIp2 POST parameter to execute arbitrary system commands. Successful exploitation with certain payloads may result in the device becom...

CVE-2018-13307

System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter. Certain payloads cause the device to become permanently inoperable...