Totolink N300RH OS Command Injection Vulnerability in Upgrade Function
Vulnerability
A command injection vulnerability has been identified in the Totolink N300RH wireless router, specifically in the firmware version 6.1c.1353_B20190305. The issue resides in the web management interface's 'setUpgradeUboot' function within the 'upgrade.so' file. This vulnerability allows remote attackers to execute arbitrary operating system commands with root privileges. The exploitation does not require authentication or user interaction.
Impact
Exploitation of this vulnerability leads to unauthorized remote code execution with root privileges on the affected device.
Reproduction
To reproduce this vulnerability, send a POST request to '/cgi-bin/cstecgi.cgi' with the 'topicurl' parameter set to 'setUpgradeUboot'. Inject shell metacharacters into the 'FileName' parameter to execute arbitrary commands. The execution can be verified by checking the output of the executed command in a web-accessible file.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.