The vulnerability of the formWlSiteSurvey() function in the /boafrm/formWlSiteSurvey file of the TOTOLINK A3002R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the formWlSiteSurvey function in the /boafrm/formWlSiteSurvey file of the TOTOLINK A3002R router’s microprogramming system is related to the lack of measures for cleaning input data during the processing of the wlanif parameter. Exploiting this vulnerability allows a remote...