Description
TOTOLINK中存在命令注入漏洞，该漏洞是由于cstecgi.cgi对用户数据缺乏验证导致的。
TOTOLINK cstecgi.cgi 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/zxsssd/TotoLink-
https://www.ithome.com.tw/news/168560
https://www.iotsec-zone.com/article/317
https://nvd.nist.gov/vuln/detail/CVE-2026-7240
https://avd.aliyun.com/detail?id=AVD-2024-10966
https://www.cnvd.org.cn/flaw/show/CNVD-2024-44851
https://www.anquanke.com/post/id/282739
https://cve.imfht.com/detail/CVE-2025-1340
https://app.opencve.io/cve/?vendor=totolink
https://www.vulncheck.com/advisories/totolink-routers-authenticated-command-injection-via-cstecgi-cgi