CVE-2026-5103 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This mani…
Medium CVSS: 5.3

CVE-2026-5103

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument enable causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Vendor
Totolink
Product
A3300r Firmware
CWE
CWE-74
Yayın Tarihi
2026-03-30 02:16:15
Güncelleme
2026-03-30 15:42:30
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A3300r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_enable_cmd_inject https://vuldb.com/submit/779140 https://vuldb.com/vuln/354128 https://vuldb.com/vuln/354128/cti https://www.totolink.net/