A vulnerability was discovered in Totolink A8000RU router firmware version 7.1cu.643_b20200521. The vulnerability affects the setPptpServerCfg function in the CGI Handler component, specifically in the /cgi-bin/cstecgi.cgi file. An attacker can manipulate the 'enable' argument to perform OS command injection attacks. The vulnerability can be exploited remotely and the exploit code has been publicly disclosed, making it readily available to attackers. This represents a significant security risk for affected Totolink router devices.