TOTOLINK N300RH Command Injection Vulnerability in CloudACMunualUpdateUserdata Function

A critical command injection vulnerability has been identified in the TOTOLINK N300RH router, specifically in the firmware version 6.1c.1390_B20191101. The issue arises in the '/cgi-bin/cstecgi.cgi' file, where the 'url' argument can be manipulated to execute arbitrary commands. This vulnerability can be exploited remotely, without authorization.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the '/cgi-bin/cstecgi.cgi' endpoint, targeting the 'CloudACMunualUpdateUserdata' function. Include a crafted 'url' argument that exploits the command injection flaw. The request can be made without any authentication.