CVE-2026-5101

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument lanIp leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Vulnerability Details

Published Date

March 29, 2026

Last Modified

March 30, 2026

CWE ID

CWE-74

Source

NVD

Vendor

totolink

Product

a3300r_firmware

External References

https://github.com/Litengzheng/vul_db/blob/main/A3300R/vul_39/README.md
https://vuldb.com/submit/779128
https://vuldb.com/vuln/354126
https://vuldb.com/vuln/354126/cti
https://www.totolink.net/

CVE-2026-5101

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment