TOTOLINK A3700R Improper Access Control Vulnerability in setUrlFilterRules Function

A critical vulnerability has been identified in the TOTOLINK A3700R router, specifically in version 9.1.2u.5822_B20200513. The issue arises in the function setUrlFilterRules within the file /cgi-bin/cstecgi.cgi, where improper access controls allow unauthorized manipulation. This vulnerability can be exploited remotely without authentication, potentially leading to unauthorized access or modification of resources.

Impact

Exploitation of this vulnerability could result in unauthorized access or manipulation of resources, as the improper access controls allow unauthorized actors to interfere with the functionality of the router.