PT-2026-29187 · Totolink · A3300R

Lvhw · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5177

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A weakness has been identified in Totolink A3300R 17.0.0cu.557 b20221024. Affected by this vulnerability is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument rxRate can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2026-5177

Affected Products

A3300R

References · 6

• 🔥 https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_rxRate_cmd_inject · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5177 · Security Note
• https://vuldb.com/vuln/354245/cti · Note
• https://totolink.net · Note
• https://vuldb.com/vuln/354245 · Note
• https://vuldb.com/submit/779146 · Note