The vulnerability of the bupload.html component in the Totolink A3002R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the bupload.html component in the Totolink A3002R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...