Totolink WA300 vulnerabilities

In Totolink WA300 5.2cu.7112_B20190227, the NTPSyncWithHost function in /cgi-bin/cstecgi.cgi allows command injection through manipulation of the hostTime argument. The attack can be executed remotely, and the exploit has been publicly disclosed.

A vulnerability was found in Totolink WA300 (version 5.2cu.7112_B20190227) in the setLanguageCfg function of /cgi-bin/cstecgi.cgi. Manipulating the langType argument leads to command injection, and the attack can be performed remotely. The exploit has been publicly released and may be used.

A vulnerability was identified in Totolink WA300 (version 5.2cu.7112_B20190227) in the setWebWlanIdx function of /cgi-bin/cstecgi.cgi. Manipulating the webWlanIdx argument leads to command injection, and the attack can be initiated remotely. The exploit is publicly available and might be used.

A vulnerability was detected in TOTOLINK WA300 version 5.2cu.7112_B20190227 affecting the sub_401510 function in cstecgi.cgi. Manipulation of the UPLOAD_FILENAME argument leads to command injection, and the attack can be initiated remotely. The exploit has been publicly disclosed and may be used.