HIGHVulnerability
Verified
Global
NVD HIGH: CVE-2026-5104 — A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b2022...
Monday, March 30, 2026 at 03:15 AM UTC·Source: NIST NVD
Updated: Monday, April 6, 2026 at 12:17 AM UTC
Executive Summary
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Analysis
A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVSS Score: 6.3. Published: 2026-03-30T03:15:58.187.