TOTOLINK NR1800X UploadFirmwareFile Command Injection Vulnerability

TOTOLINK NR1800X is an excellent 5G NR indoor Wi-Fi and SIP CPE from China Gion Electronics (TOTOLINK).Designed to provide fast and convenient deployment of NR fixed data services for homes and offices.A command injection vulnerability exists in TOTOLINK NR1800X V9.1.0u.6279_B20210910 version, which originates from the /cgi- bin/cstecgi.cgi file UploadFirmwareFile function in the FileName parameter fails to properly filter the construct command special characters, commands, and so on. An attacker could exploit the vulnerability to cause arbitrary command execution.