Remote Code Execution Vulnerability in TOTOLINK A850R and F1 Products

CVE-2015-9551

Summary

A remote code execution vulnerability has been identified in select TOTOLINK router models, particularly the A850R-V1 and F1-V2 series. This issue allows an attacker to exploit the management interface through the 'formSysCmd' parameter, potentially executing arbitrary commands on the device. Versions 1.0.1-B20150707.1612 for A850R-V1 and 1.1-B20150708.1646 for F1-V2 are known to be affected. Users are advised to review their device settings and apply any available updates to mitigate this risk.

References