CVE-2026-5176 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. Performin…
Medium CVSS: 6.9

CVE-2026-5176

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument provided results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Vendor
Totolink
Product
A3300r Firmware
CWE
CWE-74
Yayın Tarihi
2026-03-31 02:15:59
Güncelleme
2026-04-06 15:35:31
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A3300r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_rtLogServer_cmd_inject https://vuldb.com/submit/779145 https://vuldb.com/vuln/354244 https://vuldb.com/vuln/354244/cti https://www.totolink.net/