CVEvulnerability

CVE-2015-9551

9.8 CRITICAL Published 2020-11-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

An issue was discovered on TOTOLINK A850R-V1 through 1.0.1-B20150707.1612 and F1-V2 through 1.1-B20150708.1646 devices. There is Remote Code Execution in the management interface via the formSysCmd sysCmd parameter.

Affected configurations

• totolink a850r-v1 firmware (< 1.0.1-b20150707.1612) • totolink f1-v2 firmware (< 2.1.1-b20150708.1646) • totolink f2-v1 firmware (< 2.1.0-b20150320.1611) • totolink n150rt-v2 firmware (< 2.1.1-b20150708.1548) • totolink n151rt-v2 firmware (< 1.1-b20150708.1559) • totolink n300rh-v2 firmware (< 2.0.1-b20150708.1625) • totolink n300rh-v3 firmware (< 3.0.0-b20150331.0858) • totolink n300rt-v2 firmware (< 2.1.1-b20150708.1613)

References