CVE:CVE-2021-44247
CNNVD:CNNVD-202202-240
TotoLink A3100R是中国TotoLink公司的一系列无线路由器。
Totolink A3100R 存在命令注入漏洞，该漏洞源于在函数 setNoticeCfg 中包含命令注入漏洞。 此漏洞允许攻击者通过 IpFrom 参数执行任意命令。
solution:Upgrade totolink a720r_firmware to a higher version than 4.1.5cu.470_b20200911,and avoid the version 4.1.5cu.470_b20200911; Upgrade totolink a830r_firmware to a higher version than 5.9c.4729_b20191112,and avoid the version 5.9c.4729_b20191112; Upgrade totolink a3100r_firmware to a higher version than 4.1.2cu.5050_b20200504,and avoid the version 4.1.2cu.5050_b20200504