Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell commands and executed via system() without any sanitization or escaping. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TOTOLINK A720R 安全漏洞
Vulnerability Description
TOTOLINK A720R是中国吉翁电子（TOTOLINK）公司的一款无线路由器。 TOTOLINK A720R V4.1.5cu.614_B20230630版本存在安全漏洞，该漏洞源于cloudupdate_check二进制文件中magicid和url参数未经验证，可能导致命令注入。
CVSS Information
N/A
Vulnerability Type
N/A