TOTOLINK X6000R Router Command Execution

The vulnerability of the setLanCfg function /usr/sbin/shttpd of the TOTOLINK X6000R router’s microprogramming system is related to the failure to eliminate special elements used in the operating system’s command for processing the Hostname parameter. Exploiting this vulnerability allows a remote...