TOTOLINK A7100RU Command Injection Vulnerability (CNVD-2022-64269)

TOTOLINK A7100RU is a wireless router from TOTOLINK China.A security vulnerability exists in the TOTOLINK A7100RU v7.4cu.2313_b20191024 firmware version, which stems from a command injection attack in the setParentalRules interface. An attacker could use this vulnerability to execute arbitrary commands via a carefully constructed payload.