CVE-2026-5101: Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection
A vulnerability was identified in Totolink A3300R 17.0.0cu.557b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument lanIp leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5101?
CVE-2026-5101 is classified as a high severity vulnerability due to potential command injection risks.
How do I fix CVE-2026-5101?
To fix CVE-2026-5101, update the Totolink A3300R to the latest firmware version that addresses this vulnerability.
What component is affected by CVE-2026-5101?
CVE-2026-5101 affects the setLanCfg function within the /cgi-bin/cstecgi.cgi file of the Totolink A3300R.
Can CVE-2026-5101 lead to unauthorized access?
Yes, CVE-2026-5101 can lead to unauthorized access through command injection exploits.
Who is impacted by CVE-2026-5101?
Users of the Totolink A3300R router running the specified vulnerable version are impacted by CVE-2026-5101.