Home
Description
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.
References
0x09.dev/posts/toto_decouvre_une_interface_de_debug/