Medium severity6.3NVD Advisory· Published Mar 31, 2026· Updated Apr 29, 2026
CVE-2026-5178
CVE-2026-5178
Description
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument vlanPriLan3 leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected products
1- cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.557_b20221024:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_vlanPriLan3_cmd_injectnvdExploitThird Party Advisory
- vuldb.com/submit/779147nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/354246nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/354246/ctinvdPermissions RequiredVDB Entry
- www.totolink.netnvdProduct
News mentions
0No linked articles in our index yet.