Command injection

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack may be initiated remotely. The...

CVE-2024-0291

Totolink LR1200GB (firmware 9.1.0u.6619_B20230130) exposes a command injection in the UploadFirmwareFile function via the FileName parameter in /cgi-bin/cstecgi.cgi. Multiple sources (NVD/NVD-enriched, Red Hat, CNVD, CNNVD, PRION, PT Security, CVE lists) corroborate remote exploitation and critic...

CVE-2024-0291 Totolink LR1200GB cstecgi.cgi UploadFirmwareFile command injection

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack may be initiated remotely. The...