CVE-2026-2167: Totolink WA300 cstecgi.cgi setAPNetwork os command injection
A vulnerability was detected in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2167?
CVE-2026-2167 is considered a critical vulnerability due to its potential for remote code execution through OS command injection.
How do I fix CVE-2026-2167?
To fix CVE-2026-2167, update your Totolink WA300 firmware to the latest version provided by the manufacturer.
What are the potential impacts of CVE-2026-2167?
The potential impacts of CVE-2026-2167 include unauthorized access to the system and the execution of malicious commands.
Which devices are affected by CVE-2026-2167?
CVE-2026-2167 specifically affects the Totolink WA300 model running firmware version 5.2cu.7112_B20190227.
How can I check if my device is vulnerable to CVE-2026-2167?
You can check if your device is vulnerable to CVE-2026-2167 by verifying the firmware version and looking for updates from the manufacturer.