Volerion logoVolerion
Volerion logoVolerion

Totolink N300RH OS Command Injection Vulnerability in Web Management Interface

Vulnerability

An OS command injection vulnerability has been identified in the Totolink N300RH router, specifically in version 6.1c.1353_B20190305. The issue arises in the Web Management Interface, within the 'setPasswordCfg' function of the '/cgi-bin/cstecgi.cgi' file. The vulnerability can be exploited remotely by manipulating the 'admpass' argument.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the router's operating system.

Added: May 26, 2026, 4:58 PM
Updated: May 26, 2026, 4:58 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
8.7
remediation
0.0
relevance
9.6
threat
6.4
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.