HarborGuard / CVE
Back to search
CRITICALCVE-2026-3301Published Modified CNA VulDB

CVE-2026-3301: Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Metrics

CVSS v4.0
9.3
Severity
CRITICAL
Fixed in
—
Affected Products
1
Affected packages
  • Totolink / N300RH
    6.1c.1353_B20190305
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References
CVE-2026-3301: Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection | HarborGuard CVE