VULNERABILITY INTELLIGENCE

CVE-2026-4497

CVSS score7.3 HIGH
EPSS probability2.13%
CISA KEVNot currently listed
Published2026-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Weakness classification

  • cna@vuldb.com: CWE-77
  • nvd@nist.gov: CWE-78

Primary references