critical9.8
CVE-2015-9551
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices.
Impact
An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. There is Remote Code Execution in the management interface via the formSysCmd sysCmd parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A850r-V1 Firmware | before 1.0.1-b20150707.1612 |
| Totolink | F1-V2 Firmware | before 2.1.1-b20150708.1646 |
| Totolink | F2-V1 Firmware | before 2.1.0-b20150320.1611 |
| Totolink | N150rt-V2 Firmware | before 2.1.1-b20150708.1548 |
| Totolink | N151rt-V2 Firmware | before 1.1-b20150708.1559 |
| Totolink | N300rh-V2 Firmware | before 2.0.1-b20150708.1625 |
| Totolink | N300rh-V3 Firmware | before 3.0.0-b20150331.0858 |
| Totolink | N300rt-V2 Firmware | before 2.1.1-b20150708.1613 |