Critical severity9.8NVD Advisory· Published Mar 30, 2022· Updated Jul 9, 2026
CVE-2021-46007
CVE-2021-46007
Description
totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.
Affected products
3- cpe:2.3:o:totolink:ar3100r_firmware:5.9c.4577:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- hackmd.io/t_nRWxS2Q2O7GV2E5BhQMgnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.