CyberRota Analysis
AI-GeneratedA critical command injection vulnerability exists in the Totolink A3002MU router, specifically within the formWsc function of the /boafrm/formWsc file, where manipulation of the localPin argument allows for remote exploitation. This flaw poses a significant risk as it can be exploited by attackers to execute arbitrary commands on the device. Organizations using this router model should prioritize immediate remediation to mitigate potential unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.