The vulnerability of the setAPNetwork function (/cgi-bin/cstecgi.cgi) in the TOTOLINK WA300 router software allows a hacker to execute arbitrary commands.

The vulnerability of the setAPNetwork /cgi-bin/cstecgi.cgi function in the TOTOLINK WA300 router software is related to the lack of measures to sanitize input data during the processing of the ipAddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...