CVE-2026-5178 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cst…
Medium CVSS: 5.3

CVE-2026-5178

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Vendor
Totolink
Product
A3300r Firmware
CWE
CWE-74
Yayın Tarihi
2026-03-31 04:16:45
Güncelleme
2026-04-06 15:21:15
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A3300r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_vlanPriLan3_cmd_inject https://vuldb.com/submit/779147 https://vuldb.com/vuln/354246 https://vuldb.com/vuln/354246/cti https://www.totolink.net/