CVE-2026-5679: Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557B20221024. The impacted element is the function vsetTr069Cfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument stunpass leads to os command injection. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5679?
The severity of CVE-2026-5679 is rated as medium with a score of 5.1.
How do I fix CVE-2026-5679?
To fix CVE-2026-5679, update the Totolink A3300R firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-5679?
CVE-2026-5679 is classified as an OS Command Injection vulnerability that affects the vsetTr069Cfg function.
Which devices are affected by CVE-2026-5679?
CVE-2026-5679 specifically affects the Totolink A3300R with firmware version 17.0.0cu.557_B20221024.
What is the risk associated with CVE-2026-5679?
The risk associated with CVE-2026-5679 is rated at 30, indicating a potential for significant impact if exploited.