Tag
A command injection vulnerability exists in Totolink A7100RU firmware version 7.4cu.2313_b20191024, allowing remote attackers to execute arbitrary OS commands by manipulating the 'tz' argument in the setNtpCfg function within the /cgi-bin/cstecgi.cgi file.