The vulnerability of the setLanguageCfg function (/cgi-bin/cstecgi.cgi) in the Totolink A8000R router’s microprogramming software allows a malicious individual to circumvent security restrictions and gain unauthorized access to read and modify data.

The vulnerability of the setLanguageCfg /cgi-bin/cstecgi.cgi function in the Totolink A8000R router’s microprogramming software is related to the lack of authentication for the critical langType parameter during processing. Exploiting this vulnerability allows an attacker to bypass security...