TOTOLINK A3002R Router FormWlSiteSurvey Arbitrary Command Execution

The vulnerability of the formWlSiteSurvey function in the /boafrm/formWlSiteSurvey file of the TOTOLINK A3002R router’s microprogramming system is related to the lack of measures for cleaning input data during the processing of the wlanif parameter. Exploiting this vulnerability allows a remote...