A vulnerability identified in Totolink A8000R router version 5.9c.681_B20180413 allows remote authentication bypass. The issue affects the setLanguageCfg function in /cgi-bin/cstecgi.cgi file through manipulation of the langType argument. This results in missing authentication controls that can be exploited remotely. Public exploits are available making this vulnerability particularly dangerous for affected devices.