Tag
Totolink A7100RU version 7.4cu.2313_b20191024 is vulnerable to command injection due to improper neutralization of special elements within the setLedCfg function in the /cgi-bin/cstecgi.cgi file, allowing a remote attacker to execute arbitrary commands.