PT-2021-17612 · Totolink · Totolink A720R+1

Jinwen Zhou + 2 · Published 2021-04-14 · Updated 2021-04-21 · CVE-2021-27710

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version v9.1.0u.6118 B20201102 TOTOLINK A720R version v4.1.5cu.470 B20200911

Description: The issue allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because a function executes glibc's system function with untrusted input. The ip parameter is directly passed to the attacker, allowing them to control the ip field and attack the OS.

Recommendations: For TOTOLINK X5000R version v9.1.0u.6118 B20201102, consider disabling the function that executes glibc's system function with untrusted input until a patch is available. For TOTOLINK A720R version v4.1.5cu.470 B20200911, restrict access to the ip parameter in the affected HTTP request to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-27710

Affected Products

Totolink A720R

Totolink X5000R

References · 4

• 🔥 https://hackmd.io/Hy3oVgtcQiuqAtv9FdylHw · Exploit
• 🔥 https://hackmd.io/KjXzQdjDRjOuRjoZZXQo_A · Exploit
• https://osv.dev/vulnerability/CVE-2021-27710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27710 · Security Note