TOTOLINK A950RG
cpe:2.3:h:totolink:a950rg:*:*:*:*:*:*:*, +1 more
- V4.1.2cu.5204_B20210112
A command execution vulnerability has been identified in the TOTOLINK A950RG router, specifically in version V4.1.2cu.5204_B20210112. The issue arises in the setNoticeCfg interface within the /lib/cste_modules/system.so library, where the IpTo parameter is improperly processed, allowing for unauthorized command execution.
Exploitation of this vulnerability allows for arbitrary command execution on the affected device.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.