Critical · published April 22, 2025
🚨 A sneaky pre-auth remote command execution vulnerability lies in the TOTOLINK A950RG router’s setNoticeCfg function! 🔥 Think of this as a hotel where anyone can walk right into the manager's office without any ID checks, simply by saying they have a reservation — it's alarmingly easy to gain unauthorized access! An attacker could exploit this vulnerability to run any command on the router, potentially taking full control of the device. This could lead to a complete compromise of your network, allowing an attacker to intercept traffic, change configurations, or even launch attacks on other devices. Absolutely devastating!
Think of this as a hotel where anyone can walk right into the manager's office without any ID checks, simply by saying they have a reservation — it's alarmingly easy to gain unauthorized access! The vulnerability exists in the setNoticeCfg function triggered by the NoticeUrl parameter, allowing unauthenticated users to execute arbitrary commands remotely on the device.
An attacker could exploit this vulnerability to run any command on the router, potentially taking full control of the device. This could lead to a complete compromise of your network, allowing an attacker to intercept traffic, change configurations, or even launch attacks on other devices. Absolutely devastating! Update your TOTOLINK A950RG router immediately to version V4.1.2cu.5161_B20200904 or later. Additionally, it’s advisable to review your network security settings and limit access to trusted devices as a precaution. You can tackle this vulnerability head-on! Follow the steps provided and you’ll have your router secured in no time. 🛡️