PT-2021-17611 · Totolink · Totolink A720R+1

Jinwen Zhou + 2 · Published 2021-04-14 · Updated 2021-04-21 · CVE-2021-27708

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version v9.1.0u.6118 B20201102 TOTOLINK A720R version v4.1.5cu.470 B20200911

Description: The issue allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because a function executes glibc's system function with untrusted input. The command parameter is directly passed to the attacker, allowing them to control the command field and attack the OS.

Recommendations: For TOTOLINK X5000R version v9.1.0u.6118 B20201102, consider disabling the function that executes the system command with untrusted input until a patch is available. For TOTOLINK A720R version v4.1.5cu.470 B20200911, restrict access to the command parameter in the affected HTTP request to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-27708

Affected Products

Totolink A720R

Totolink X5000R

References · 4

• 🔥 https://hackmd.io/mDgIBvoxSPCZrZiZjfQGhw · Exploit
• 🔥 https://hackmd.io/7FtB06f-SJ-SCfkMYcXYxA · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27708 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27708 · Vendor Advisory