critical9.8
CVE-2018-13316
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.
Impact
System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3002ru Firmware | Version 1.0.8 |