critical9.8
CVE-2021-46007
totolink a3100r V5.9c.4577 is vulnerable to os command injection.
Impact
totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Ar3100r Firmware | Version 5.9c.4577 |