N150Rt
Monthly
OS command injection in the TOTOLINK N150RT SOHO router (firmware 3.4.0-B20201030) lets an attacker who can reach the Web Management Interface and has at least low-privilege credentials execute arbitrary operating-system commands on the device. The flaw is reachable through the /boafrm/formWlSiteSurvey handler, where the 'wlanif' argument is passed unsanitized into a shell command, giving full compromise of confidentiality, integrity and availability (CVSS 4.0 base 8.6; independent assessment maps this to CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Publicly available exploit code exists (a reference gist is tagged as an exploit), meaning the technique is already in circulation, but the issue is not confirmed actively exploited (no CISA KEV entry) and it is privilege-gated: the router web interface is normally LAN-facing, so WAN reachability depends on remote administration being enabled.
OS command injection in the TOTOLINK N150RT SOHO router (firmware 3.4.0-B20201030) lets an attacker who can reach the Web Management Interface and has at least low-privilege credentials execute arbitrary operating-system commands on the device. The flaw is reachable through the /boafrm/formWlSiteSurvey handler, where the 'wlanif' argument is passed unsanitized into a shell command, giving full compromise of confidentiality, integrity and availability (CVSS 4.0 base 8.6; independent assessment maps this to CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Publicly available exploit code exists (a reference gist is tagged as an exploit), meaning the technique is already in circulation, but the issue is not confirmed actively exploited (no CISA KEV entry) and it is privilege-gated: the router web interface is normally LAN-facing, so WAN reachability depends on remote administration being enabled.