CVE-2026-3301

CRITICAL

中文标题:

（暂无数据）

英文标题:

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnera

CVSS分数: 9.8

发布时间: 2026-02-27 06:18:00

漏洞类型: （暂无数据）

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v1

漏洞描述

中文描述:

（暂无数据）

英文描述:

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

CWE类型:

CWE-77 CWE-78

受影响产品

厂商	产品	版本	版本范围	平台	CPE
totolink	n300rh_firmware	6.1c.1349_b20181018	-	-	`cpe:2.3:o:totolink:n300rh_firmware:6.1c.1349_b20181018:::::::*`
totolink	n300rh_firmware	6.1c.1353_b20190305	-	-	`cpe:2.3:o:totolink:n300rh_firmware:6.1c.1353_b20190305:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）