Vulnerabilidades do Totolink Wa300 Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Totolink Wa300 Firmware: 3 registro(s), com versões afetadas e correções.
cpe:2.3:o:totolink:wa300_firmware

CVE-2026-4497 Crítica · 9.8 CWE-78 20/03/2026

Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVE-2026-2167 Alta · 8.8 CWE-78 08/02/2026

Totolink WA300 cstecgi.cgi setAPNetwork os command injection

A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used.

CVE-2026-0641 Alta · 8.8 CWE-77 06/01/2026

TOTOLINK WA300 cstecgi.cgi sub_401510 command injection

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.