The vulnerability of the `setUpgradeUboot()` function (upgrade.so) in the TOTOLINK CA300-PoE router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the setUpgradeUboot function in the upgrade.so library of TOTOLINK CA300-PoE router microprogramming software is related to the failure to take measures to clean data at the management level when processing the FileName parameter. Exploiting this vulnerability can allow an...