Product

A8000RU

3 briefs RSS

Totolink A8000RU OS Command Injection Vulnerability

Totolink A8000RU version 7.1cu.643_b20200521 is vulnerable to OS command injection via manipulation of the `wifiOff` argument in the `setWiFiBasicCfg` function of the `/cgi-bin/cstecgi.cgi` CGI handler, allowing a remote attacker to execute arbitrary commands on the system.

A8000RU cve-2026-7241 command-injection router

2r 1t 1c Apr 28, 2026

critical advisory

Totolink A8000RU OS Command Injection Vulnerability

2 rules 1 TTP 1 CVE

A remote OS command injection vulnerability exists in the setOpenVpnClientCfg function of the Totolink A8000RU router (version 7.1cu.643_b20200521) via manipulation of the 'enabled' argument in the /cgi-bin/cstecgi.cgi CGI handler.

A8000RU command-injection rce totolink cve-2026-7242

2r 1t 1c Apr 28, 2026

critical advisory

Totolink A8000RU Command Injection Vulnerability (CVE-2026-7244)

3 rules 1 TTP 1 CVE

A critical OS command injection vulnerability (CVE-2026-7244) exists in the setWiFiEasyGuestCfg function of the /cgi-bin/cstecgi.cgi file in Totolink A8000RU version 7.1cu.643_b20200521, allowing remote attackers to execute arbitrary commands.

A8000RU command injection router vulnerability cve-2026-7244

3r 1t 1c Apr 28, 2026