A3300R Firmware
Monthly
Incorrect access control in the web management interface of TOTOLINK A3300R and N200RE router firmware allows remote, unauthenticated attackers to send requests to protected interface endpoints without logging in, granting them high-impact read and write capability over device configuration and data (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Affected builds include A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519, with the practical exposure ceiling set by whether the management interface is reachable from the WAN side. Publicly available exploit code exists (a published proof-of-concept is linked from the NVD entry), but the flaw is not confirmed as actively exploited (no CISA KEV listing) at time of analysis.
Command injection in the TOTOLINK A3300R Wi-Fi router affects firmware version V17.0.0cu.596_B20250515, where the NTPSyncWithHost function fails to sanitize the host_time parameter, letting an attacker run arbitrary shell commands on the device. The CVSS vector (AV:A, PR:N, UI:N) means the attacker must be on the same local network segment (connected to the router's LAN or Wi-Fi) and needs no authentication or user interaction, so the realistic threat is an on-network or post-foothold attacker rather than a broad internet-wide compromise. Publicly available exploit code exists, though there is no confirmation of active exploitation in this data; our independent assessment rates the impact as high for confidentiality, integrity, and availability because command execution on a router typically yields full control of the device.
A stack-based buffer overflow in the setSyslogCfg handler of TOTOLINK A3300R firmware 17.0.0cu.557_B20221024 lets remote attackers crash the device, and likely gain code execution, by sending an oversized value in the 'enable' POST parameter to /cgi-bin/cstecgi.cgi. The affected attack surface is the router's web/management interface, so exploitation requires network reachability to that interface and - per the assessed CVSS vector (PR:L) - likely a valid authenticated session, although pre-authentication access is not confirmed. Publicly available exploit code exists (a public PoC write-up is linked in the references), but there is no indication of confirmed active exploitation (not in CISA KEV); EPSS is 1.02% (62nd percentile), indicating moderate, not top-tier, exploitation likelihood.
A stack-based buffer overflow in the setScheduleCfg function of the TOTOLINK A3300R router (firmware 17.0.0cu.557_B20221024) lets an attacker who can reach the device's web management interface send a POST request to /cgi-bin/cstecgi.cgi with an oversized recHour parameter and corrupt memory, which the assessed vector rates as high impact to confidentiality, integrity and availability (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; vendor/CNA CVSS 4.0 base 7.4). Exploit code is publicly available via a GitHub proof-of-concept writeup, so unpatched, internet- or LAN-exposed units should be presumed exploitable, though there is no CISA KEV evidence of active exploitation and EPSS is modest at 1.02% (62nd percentile). Per the PR:L vector, low-privilege authentication is indicated, meaning attackers need valid or default web-interface credentials - the description itself does not independently confirm this gate, so it should be verified against the affected build.
Stack-based buffer overflow in the TOTOLINK A3300R router firmware (build 17.0.0cu.557_B20221024) allows remote attackers to corrupt memory via the 'opmode' POST parameter handled by setOpModeCfg in /cgi-bin/cstecgi.cgi. Per the assessed CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N), exploitation requires a valid authenticated management session and network reachability to the device's HTTP administration interface - the overflow is not reachable pre-authentication, and the panel is LAN-side by default, becoming remotely exploitable only where WAN/remote administration is enabled or the interface is otherwise exposed. Publicly available exploit code exists (proof-of-concept published on GitHub), but there is no indication of confirmed active exploitation (not in CISA KEV), and EPSS places likelihood at roughly 1.02% (62nd percentile) - a real but not top-tier priority for most environments.
Authenticated stack-based buffer overflow in the TOTOLINK A3300R SOHO router (firmware 17.0.0cu.557_B20221024) allows a remote attacker holding valid web-management credentials to corrupt memory by sending an over-length 'lang' value to the setLanguageCfg function of /cgi-bin/cstecgi.cgi, resulting in a device crash and, depending on the runtime build, potential code execution with full loss of confidentiality, integrity and availability. Publicly available exploit code exists (a step-by-step proof-of-concept for this exact firmware is published on GitHub), but the flaw is not in CISA KEV, so active exploitation is not confirmed; EPSS is 1.03% (63rd percentile), a moderate score consistent with a targeted IoT/router issue rather than mass scanning. Both the CVSS 4.0 base of 7.4 and the independent assessment (CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) agree on High impacts but require the attacker to first reach the router's HTTP management interface and authenticate at low privilege (PR:L), and only the one firmware build listed under the CPE is confirmed affected.
Authenticated remote attackers can trigger a buffer overflow in the setDmzCfg handler of TOTOLINK A3300R firmware 17.0.0cu.557_B20221024 by sending a crafted ip parameter to /cgi-bin/cstecgi.cgi, potentially leading to arbitrary code execution or device crash with high confidentiality, integrity, and availability impact. Publicly available exploit code exists, and EPSS is 0.84% (56th percentile), but no confirmed active exploitation (CISA KEV) is indicated in the provided data. The attack requires network access to the router's web management interface and a valid low-privilege session (PR:L in both the supplied CVSS 4.0 vector and the independent CVSS 3.1 assessment), so default or compromised credentials or an authentication bypass would be needed.
Buffer overflow in the TOTOLINK A3300R router firmware (17.0.0cu.557_B20221024) lets an authenticated, low-privilege remote attacker corrupt memory through the setDdnsCfg function of /cgi-bin/cstecgi.cgi, with high impact to confidentiality, integrity and availability on the device. Exploitation requires network reachability to the device's web management service and a valid low-privilege session (CVSS PR:L), though default or weak credentials on consumer routers can make that trivial; no user interaction is required. Publicly available exploit code exists (a proof-of-concept writeup is published on GitHub), but there is no KEV listing and no confirmed active exploitation, and EPSS is low at 0.84% (56th percentile), so risk is moderate and driven mainly by exposure of the management interface.
A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Rated low severity (CVSS 2.0). Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Incorrect access control in the web management interface of TOTOLINK A3300R and N200RE router firmware allows remote, unauthenticated attackers to send requests to protected interface endpoints without logging in, granting them high-impact read and write capability over device configuration and data (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). Affected builds include A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519, with the practical exposure ceiling set by whether the management interface is reachable from the WAN side. Publicly available exploit code exists (a published proof-of-concept is linked from the NVD entry), but the flaw is not confirmed as actively exploited (no CISA KEV listing) at time of analysis.
Command injection in the TOTOLINK A3300R Wi-Fi router affects firmware version V17.0.0cu.596_B20250515, where the NTPSyncWithHost function fails to sanitize the host_time parameter, letting an attacker run arbitrary shell commands on the device. The CVSS vector (AV:A, PR:N, UI:N) means the attacker must be on the same local network segment (connected to the router's LAN or Wi-Fi) and needs no authentication or user interaction, so the realistic threat is an on-network or post-foothold attacker rather than a broad internet-wide compromise. Publicly available exploit code exists, though there is no confirmation of active exploitation in this data; our independent assessment rates the impact as high for confidentiality, integrity, and availability because command execution on a router typically yields full control of the device.
A stack-based buffer overflow in the setSyslogCfg handler of TOTOLINK A3300R firmware 17.0.0cu.557_B20221024 lets remote attackers crash the device, and likely gain code execution, by sending an oversized value in the 'enable' POST parameter to /cgi-bin/cstecgi.cgi. The affected attack surface is the router's web/management interface, so exploitation requires network reachability to that interface and - per the assessed CVSS vector (PR:L) - likely a valid authenticated session, although pre-authentication access is not confirmed. Publicly available exploit code exists (a public PoC write-up is linked in the references), but there is no indication of confirmed active exploitation (not in CISA KEV); EPSS is 1.02% (62nd percentile), indicating moderate, not top-tier, exploitation likelihood.
A stack-based buffer overflow in the setScheduleCfg function of the TOTOLINK A3300R router (firmware 17.0.0cu.557_B20221024) lets an attacker who can reach the device's web management interface send a POST request to /cgi-bin/cstecgi.cgi with an oversized recHour parameter and corrupt memory, which the assessed vector rates as high impact to confidentiality, integrity and availability (CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; vendor/CNA CVSS 4.0 base 7.4). Exploit code is publicly available via a GitHub proof-of-concept writeup, so unpatched, internet- or LAN-exposed units should be presumed exploitable, though there is no CISA KEV evidence of active exploitation and EPSS is modest at 1.02% (62nd percentile). Per the PR:L vector, low-privilege authentication is indicated, meaning attackers need valid or default web-interface credentials - the description itself does not independently confirm this gate, so it should be verified against the affected build.
Stack-based buffer overflow in the TOTOLINK A3300R router firmware (build 17.0.0cu.557_B20221024) allows remote attackers to corrupt memory via the 'opmode' POST parameter handled by setOpModeCfg in /cgi-bin/cstecgi.cgi. Per the assessed CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N), exploitation requires a valid authenticated management session and network reachability to the device's HTTP administration interface - the overflow is not reachable pre-authentication, and the panel is LAN-side by default, becoming remotely exploitable only where WAN/remote administration is enabled or the interface is otherwise exposed. Publicly available exploit code exists (proof-of-concept published on GitHub), but there is no indication of confirmed active exploitation (not in CISA KEV), and EPSS places likelihood at roughly 1.02% (62nd percentile) - a real but not top-tier priority for most environments.
Authenticated stack-based buffer overflow in the TOTOLINK A3300R SOHO router (firmware 17.0.0cu.557_B20221024) allows a remote attacker holding valid web-management credentials to corrupt memory by sending an over-length 'lang' value to the setLanguageCfg function of /cgi-bin/cstecgi.cgi, resulting in a device crash and, depending on the runtime build, potential code execution with full loss of confidentiality, integrity and availability. Publicly available exploit code exists (a step-by-step proof-of-concept for this exact firmware is published on GitHub), but the flaw is not in CISA KEV, so active exploitation is not confirmed; EPSS is 1.03% (63rd percentile), a moderate score consistent with a targeted IoT/router issue rather than mass scanning. Both the CVSS 4.0 base of 7.4 and the independent assessment (CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) agree on High impacts but require the attacker to first reach the router's HTTP management interface and authenticate at low privilege (PR:L), and only the one firmware build listed under the CPE is confirmed affected.
Authenticated remote attackers can trigger a buffer overflow in the setDmzCfg handler of TOTOLINK A3300R firmware 17.0.0cu.557_B20221024 by sending a crafted ip parameter to /cgi-bin/cstecgi.cgi, potentially leading to arbitrary code execution or device crash with high confidentiality, integrity, and availability impact. Publicly available exploit code exists, and EPSS is 0.84% (56th percentile), but no confirmed active exploitation (CISA KEV) is indicated in the provided data. The attack requires network access to the router's web management interface and a valid low-privilege session (PR:L in both the supplied CVSS 4.0 vector and the independent CVSS 3.1 assessment), so default or compromised credentials or an authentication bypass would be needed.
Buffer overflow in the TOTOLINK A3300R router firmware (17.0.0cu.557_B20221024) lets an authenticated, low-privilege remote attacker corrupt memory through the setDdnsCfg function of /cgi-bin/cstecgi.cgi, with high impact to confidentiality, integrity and availability on the device. Exploitation requires network reachability to the device's web management service and a valid low-privilege session (CVSS PR:L), though default or weak credentials on consumer routers can make that trivial; no user interaction is required. Publicly available exploit code exists (a proof-of-concept writeup is published on GitHub), but there is no KEV listing and no confirmed active exploitation, and EPSS is low at 0.84% (56th percentile), so risk is moderate and driven mainly by exposure of the management interface.
A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Rated low severity (CVSS 2.0). Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIpv6Cfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.