TOTOLINK CA300-PoE Command Injection Vulnerability

The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884 due to a command injection issue in the pluginversion parameter of the setUnloadUserData method...