A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI …

Published:

26 april 2026 om 22:00:00

Alert date:

27 april 2026 om 22:02:51

Source:

nvd.nist.gov

Mobile & IoT, Network Infrastructure

A remote command injection vulnerability has been identified in Totolink A8000RU router firmware version 7.1cu.643_b20200521. The vulnerability affects the CsteSystem function in the /cgi-bin/cstecgi.cgi file of the CGI Handler component. Attackers can exploit this flaw by manipulating HTTP arguments to execute arbitrary OS commands. The vulnerability can be exploited remotely and public exploits are already available, making it a high-risk security issue for affected devices.

Technical details

Mitigation steps:

Affected products:

Totolink A8000RU