A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. E…

A critical vulnerability has been identified in Totolink A7100RU router firmware version 7.4cu.2313_b20191024. The vulnerability exists in the setScheduleCfg function within the /cgi-bin/cstecgi.cgi file. Attackers can exploit this flaw by manipulating the 'mode' argument to achieve OS command injection. The vulnerability can be exploited remotely, making it particularly dangerous. Public exploits are already available, increasing the risk of active exploitation. This affects the network infrastructure and could allow attackers to gain unauthorized system access and execute arbitrary commands on the affected router.