Totolink A8000RU vulnerabilities

In the Totolink A8000RU web management interface, the setParentalRules function is vulnerable to OS command injection via the enable argument.

In the Totolink A8000RU web management interface, the setAccessDeviceCfg function is vulnerable to OS command injection via the mac argument.

In the Totolink A8000RU web management interface, the setPasswordCfg function is vulnerable to OS command injection via the admpass argument.

In the Totolink A8000RU web management interface, the setIpQosRules function is vulnerable to OS command injection via the Comment argument.

A vulnerability in the Totolink A8000RU router version 7.1cu.643_b20200521 allows a remote attacker to inject OS commands via the enabled argument in the setWanCfg function of the web management interface.

A vulnerability in the Totolink A8000RU router version 7.1cu.643_b20200521 allows a remote attacker to inject OS commands via the FileName argument in the UploadFirmwareFile function of the web management interface.

In the Totolink A8000RU web management interface, the setOpenVpnCfg function is vulnerable to OS command injection via the enabled argument.

In the Totolink A8000RU web management interface, the UploadOpenVpnCert function is vulnerable to OS command injection via the FileName argument.

In the Totolink A8000RU web management interface, the setOpenVpnCertGenerationCfg function is vulnerable to OS command injection via the servername argument.

A vulnerability has been found in the Totolink A8000RU router version 7.1cu.643_b20200521, allowing OS command injection via the setL2tpServerCfg function in /cgi-bin/cstecgi.cgi by manipulating the enable argument. The attack can be executed remotely, and an exploit has been published.

A vulnerability was detected in the web management interface of Totolink A8000RU router, allowing OS command injection. The issue is in the setQosCfg function of /cgi-bin/cstecgi.cgi, where the enable argument is not properly sanitized. The attack can be performed remotely and the exploit is publicly available.

A security vulnerability was found in the web management interface of Totolink A8000RU, leading to OS command injection. It affects the setWiFiWpsCfg function in /cgi-bin/cstecgi.cgi, where the wscDisabled argument is mishandled. The attack can be launched remotely and the exploit is public.

A weakness was identified in the web management interface of Totolink A8000RU, allowing OS command injection. It affects the setMacFilterRules function in /cgi-bin/cstecgi.cgi, where the enable argument is not properly sanitized. The attack can be initiated remotely and the exploit is public.

A security flaw was discovered in the web management interface of Totolink A8000RU, leading to OS command injection. It affects the setWiFiAdvancedCfg function in /cgi-bin/cstecgi.cgi, where the bgProtection argument is mishandled. The attack can be launched remotely and the exploit is public.

A vulnerability was detected in the web management interface of Totolink A8000RU, allowing OS command injection. It affects the setStaticDhcpRules function in /cgi-bin/cstecgi.cgi, where the enable argument is not properly sanitized. The attack can be performed remotely and the exploit is public.

A security vulnerability was found in the web management interface of Totolink A8000RU, leading to OS command injection. It affects the setFirewallType function in /cgi-bin/cstecgi.cgi, where the firewallType argument is mishandled. The attack can be launched remotely and the exploit is public.

A weakness was identified in the web management interface of Totolink A8000RU, allowing OS command injection. It affects the setRemoteCfg function in /cgi-bin/cstecgi.cgi, where the enable argument is not properly sanitized. The attack can be initiated remotely and the exploit is public.

A security flaw was discovered in the web management interface of Totolink A8000RU, leading to OS command injection. It affects the setGameSpeedCfg function in /cgi-bin/cstecgi.cgi, where the enable argument is mishandled. The attack can be launched remotely and the exploit is public.

A vulnerability was identified in the web management interface of Totolink A8000RU, allowing OS command injection. It affects the setDdnsCfg function in /cgi-bin/cstecgi.cgi, where the provider argument is not properly sanitized. The attack can be performed remotely and the exploit is public.

A vulnerability in the Totolink A8000RU router version 7.1cu.643_b20200521 allows a remote attacker to inject OS commands via the mode argument in the setScheduleCfg function of the web management interface.

A security flaw was discovered in the web management interface of Totolink A8000RU, leading to OS command injection. It affects the setUpgradeFW function in /cgi-bin/cstecgi.cgi, where the resetFlags argument is mishandled. The attack can be launched remotely and the exploit is public.

A vulnerability was identified in the Totolink A8000RU router firmware 7.1cu.643_b20200521. The setLanguageCfg function in /cgi-bin/cstecgi.cgi mishandles the lang argument, allowing remote OS command injection.

A vulnerability was found in the Totolink A8000RU router firmware 7.1cu.643_b20200521. The setTracerouteCfg function in /cgi-bin/cstecgi.cgi improperly validates the command argument, enabling remote OS command injection.

A vulnerability was discovered in the Totolink A8000RU router firmware 7.1cu.643_b20200521. The setDiagnosisCfg function in /cgi-bin/cstecgi.cgi fails to properly sanitize the ip argument, allowing remote OS command injection.

A security flaw has been discovered in Totolink A8000RU version 7.1cu.643_b20200521. The function setAppFilterCfg in the file /cgi-bin/cstecgi.cgi is vulnerable to OS command injection through manipulation of the argument enable.

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi. Manipulation of the argument enable causes OS command injection. The attack may be initiated remotely. The exploit has been publicly disclosed.

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. Manipulation of the argument enable results in OS command injection. The attack can be launched remotely. The exploit has been made public.

A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi. Manipulation of the argument wscDisabled leads to OS command injection. The attack can be initiated remotely. The exploit has been disclosed to the public.