Wa300 Firmware vulnerabilities

3 known vulnerabilities in Wa300 Firmware from TOTOLINK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WA300: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-4497Mar 20, 2026TOTOLINKEPSS 2.18%

  A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation causes os command injection. Remote exploitation of the attack is possible. The e

• 8.8 High severity

  WA300: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-2167Feb 8, 2026TOTOLINKEPSS 2.51%

  A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be performed from r

• 8.8 High severity

  WA300: Improper Neutralization of Special Elements used in a Command

  CVE-2026-0641Jan 6, 2026TOTOLINKEPSS 2.65%

  A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initia