Description
TOTOLINK存在命令注入漏洞，此漏洞是缺乏校验导致的。
TOTOLINK CVE-2021-43711命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-43711
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33636
https://github.com/doudoudedi/ToTolink_EX200_Cmmand_Execute/blob/main/ToTolink%20EX200%20Comand%20Injection2.md
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2021-1095.html/
https://avd.aliyun.com/detail?id=AVD-2021-43711
https://cve.circl.lu/vuln/CVE-2021-43711
https://www.cybersecurity-help.cz/vdb/SB2022031414
https://cve.imfht.com/detail/CVE-2021-43711
https://www.venustech.com.cn/new_type/mzsjgg/20220315/23566.html
https://attilaszia/linux-iot-cves