Beveiligingsadvies

CVE-2026-5689

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 22:30:14
Laatst bijgewerkt 2026-04-07 13:28:13
Toegewezen door VulDB
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.