TOTOLINK WA300 Router Command Execution

The vulnerability of the setAPNetwork /cgi-bin/cstecgi.cgi function in the TOTOLINK WA300 router software is related to the lack of measures to sanitize input data during the processing of the ipAddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...