Volerion logoVolerion
Volerion logoVolerion

Totolink A3300R Command Injection Vulnerability

Vulnerability

A command injection vulnerability has been identified in the Totolink A3300R router, specifically in version V17.0.0cu.596_B20250515. The issue arises in the sub_4197C0 function, where the mac and desc parameters can be manipulated to execute arbitrary commands. This vulnerability can be exploited by unauthenticated attackers through a crafted request.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Added: Jul 17, 2025, 4:22 PM
Updated: Jul 17, 2025, 4:22 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
7.0
remediation
0.0
relevance
0.3
threat
1.3
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.