CVE-2026-5104

MEDIUM

Published:Mar 30, 2026(Today)

Modified:Mar 30, 2026

Vulnerability Description

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Attack Characteristics

Network AccessLow ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

References

https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_ip...
https://vuldb.com/submit/779142
https://vuldb.com/vuln/354129
https://vuldb.com/vuln/354129/cti

CVSS Score

v3.1

6.3/ 10.0

MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

At a Glance

Affected Products

References

CVSS v3 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVE-2026-5104

✦ Vulnerability Description

Attack Characteristics

References

CVSS Score

At a Glance

CVSS v3 Vector

Impact Analysis

Vulnerability Description