← voltar
CVE-2026-9433

Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection

CVSS 9.3 CRITICALEPSS 1.7%CWE-77CWE-78
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument enable causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Totolink · A8000RU
PoCs públicas encontradas — 1
cve_referencegithub.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_354/README.mdnão verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_354/README.mdhttps://vuldb.com/submit/813906https://vuldb.com/vuln/365414https://vuldb.com/vuln/365414/ctihttps://www.totolink.net/