CVE-2026-5105 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of t…
Medium CVSS: 5.3

CVE-2026-5105

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument pptpPassThru results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Vendor
Totolink
Product
A3300r Firmware
CWE
CWE-74
Yayın Tarihi
2026-03-30 04:16:09
Güncelleme
2026-03-30 15:40:01
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A3300r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_pptpPassThru_cmd_inject https://vuldb.com/submit/779143 https://vuldb.com/vuln/354130 https://vuldb.com/vuln/354130/cti https://www.totolink.net/