Product

A8000RU

2 briefs RSS

Totolink A8000RU OS Command Injection Vulnerability

Totolink A8000RU version 7.1cu.643_b20200521 is vulnerable to OS command injection via manipulation of the `wifiOff` argument in the `setWiFiBasicCfg` function of the `/cgi-bin/cstecgi.cgi` CGI handler, allowing a remote attacker to execute arbitrary commands on the system.

A8000RU cve-2026-7241 command-injection router

2r 1t 1c 6d ago

critical advisory

Totolink A8000RU Command Injection Vulnerability (CVE-2026-7244)

3 rules 1 TTP 1 CVE

A critical OS command injection vulnerability (CVE-2026-7244) exists in the setWiFiEasyGuestCfg function of the /cgi-bin/cstecgi.cgi file in Totolink A8000RU version 7.1cu.643_b20200521, allowing remote attackers to execute arbitrary commands.

A8000RU command injection router vulnerability cve-2026-7244

3r 1t 1c 6d ago