The vulnerability of the setL2tpdConfig function (cgi-bin/cstecgi.cgi) in the TOTOLINK X18 router microprogramming software, which allows a hacker to execute arbitrary commands.

The vulnerability of the setL2tpdConfig function cgi-bin/cstecgi.cgi in the TOTOLINK X18 router microprogramming software exists because measures to neutralize special elements during the processing of the enable parameter are not taken. Exploiting this vulnerability allows a remote attacker to...