CVE-2023-37171

TOTOLINK A3300R firmware version V17.0.0cu.557_B20221024 contains a command injection vulnerability in the setPasswordCfg function, exploitable via the admuser parameter. Root cause: inadequate input handling/filtering of constructed commands. Impact: high on confidentiality, integrity, and avail...