critical9.8
CVE-2018-13311
System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter.
Impact
System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3002ru Firmware | Version 1.0.8 |