The vulnerability of the setLanCfg() function (/usr/sbin/shttpd) of the TOTOLINK X6000R router’s software allows a attacker to execute arbitrary commands.

The vulnerability of the setLanCfg function /usr/sbin/shttpd of the TOTOLINK X6000R router’s microprogramming system is related to the failure to eliminate special elements used in the operating system’s command for processing the Hostname parameter. Exploiting this vulnerability allows a remote...