medium6.5
CVE-2026-31162
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-b…
Impact
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3300r Firmware | Version 17.0.0cu.557_b20221024 |