TOTOLINK CA300-PoE OS Command Injection Vulnerability

A critical OS command injection vulnerability has been identified in the TOTOLINK CA300-PoE router running firmware version 6.2c.884. The issue arises in the 'setUpgradeUboot' function of the 'upgrade.so' file, where the 'FileName' argument can be manipulated to execute arbitrary operating system commands. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a crafted request to the TOTOLINK CA300-PoE router's 'setUpgradeUboot' function, including a payload that manipulates the 'FileName' argument. This can be done remotely, taking advantage of the command injection flaw to execute arbitrary commands on the operating system.