CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the web management interface of TOTOLINK N150RT routers, specifically in the handling of the wlanif argument within the /boafrm/formWlSiteSurvey function, allowing for OS command injection. This flaw enables remote attackers to execute arbitrary commands on the device, posing a significant risk to network security. Organizations using affected TOTOLINK devices should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.