TOTOLINK A3002R formWlSiteSurvey os command injection
TOTOLINK · A3002R
A command injection flaw exists in the formWlSiteSurvey function (/boafrm/formWlSiteSurvey) of the TOTOLINK A3002R router firmware, where the wlanif argument is not properly sanitised before being passed to the operating system. An attacker who can reach the device's web management interface over the network, with low-privilege authenticated access and no user interaction required, can inject OS commands that execute on the device.
A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 7 months after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+7 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.