CVE-2026-31172

published 2026-04-23

CVE-2026-31172: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to…

medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3300r_firmware	—	—

CWE-77