Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-31173 An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cs… https://www.cve.org/CVERecord?id=CVE-2026-31173
Post summary
CVE‑2026‑31173 exposes a command‑execution flaw in ToToLink A3300R firmware, enabling attackers to run arbitrary commands through the /cgi-bin/cs endpoint's interval parameter.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | a3300r | - | - | - |
| OS | totolink | a3300r_firmware | 17.0.0cu.557_b20221024 | - | - |