The vulnerability of the sub_40BFA4() function in TOTOLINK A720R router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the sub40BFA4 function in TOTOLINK A720R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

CVE-2025-60683: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary, specifically in the sub40BFA4 function that handles network interface reinitialization from '/var/system/linuxvlanreinit'. Input is only partially validated by checking...