A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cst…

A critical security vulnerability has been identified in Totolink A8000RU router firmware version 7.1cu.643_b20200521. The flaw exists in the setMiniuiHomeInfoShow function within the CGI Handler component at /cgi-bin/cstecgi.cgi. Attackers can exploit this vulnerability by manipulating the sys_info argument to achieve OS command injection. The attack can be executed remotely, making it particularly dangerous. A public exploit has been released and is available for potential attackers to use. This vulnerability poses a significant risk to affected devices and networks.