medium6.5
CVE-2026-31166
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin…
Impact
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3300r Firmware | Version 17.0.0cu.557_b20221024 |