CVE-2026-5102 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstec…
Medium CVSS: 5.3

CVE-2026-5102

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument qos_up_bw results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Vendor
Totolink
Product
A3300r Firmware
CWE
CWE-74
Yayın Tarihi
2026-03-30 00:16:01
Güncelleme
2026-03-30 15:49:31
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A3300r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/Litengzheng/vul_db/blob/main/A3300R/vul_40/README.md https://vuldb.com/submit/779129 https://vuldb.com/vuln/354127 https://vuldb.com/vuln/354127/cti https://www.totolink.net/