CVE-2026-9477
CriticalSummary
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521 affecting the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the Web Management Interface. Manipulating the argument mac results in OS command injection.
Risk Assessment
This vulnerability allows for remote exploitation, posing a significant security risk to the system. A publicly available exploit may be used for attacks.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.
Original NVD description (English source)
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument mac results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.