The vulnerability of the QuickSetting() function (ap.so) in the TOTOLINK CA300-PoE router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the QuickSetting function ap.so in the TOTOLINK CA300-PoE router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the hour/minute parameter. Exploiting this vulnerability could allow a remote attacker to...