TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.4epss 1.9%
exploitation probability
1.9%top 22% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Affected products
TOTOLINK · N150RTpublic PoCs found — 1
cve_referencegist.github.com/H3rmesk1t/c071a62375f38b629f67653428a8f25aunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.