S4E just found a medium [ai] private ip disclosure detection scanner
critical·Product Based Web Vulnerabilities·Updated Feb 2, 2024

CVE-2023-46574 Scanner

Targets the web management interface's formSetDebugCfg endpoint; attacker injects OS commands via the enable parameter to gain root shell access.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
3k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-46574
9.8
CVSS

An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
a3700r_firmwareby totolink
9.1.2u.6165_20211012
Updated Aug 22, 2026View on NVD →
Detail

The TOTOLINK A3700R is a dual-band wireless router powered by an 880MHz dual-core processor, supporting IEEE 802.11ac wave2 and MU-MIMO technology. It is widely used in home and small office environments to deliver high-speed internet connectivity, manage network traffic, and provide wireless coverage. Its web-based management interface allows administrators to configure settings like Wi-Fi, firewall, and system tools.

CVE-2023-46574 is an OS Command Injection vulnerability in the TOTOLINK A3700R firmware version 9.1.2u.6165_20211012. It arises because the web management interface fails to properly sanitize user-supplied input before passing it to system commands. This lack of validation allows an attacker to inject arbitrary operating system commands that are executed with root privileges.

The vulnerability specifically exists in the formSetDebugCfg function, accessible via the /cgi-bin/luci/;stok=/locale endpoint. The vulnerable parameter is 'enable', which is directly concatenated into a shell command without any filtering or escaping. An attacker can send a crafted HTTP POST request containing malicious command sequences, such as command separators like ';' or '&&', to trigger execution.

If exploited, an attacker can gain complete remote control over the router, including the ability to modify network settings, intercept traffic, launch further attacks on internal devices, or use the router as part of a botnet. Given the CVSS score of 9.8, this vulnerability poses a critical risk to network security and requires immediate remediation.

Solution Advice
  • Update the TOTOLINK A3700R firmware to the latest patched version that addresses CVE-2023-46574.
  • Disable remote management access from the WAN side if not required for business operations.
  • Implement strict input validation on the formSetDebugCfg endpoint to reject any special characters or command separators.
  • Change default administrator credentials to strong, unique passwords immediately.
  • Restrict access to the web management interface to trusted IP addresses only using firewall rules.
  • Regularly monitor router logs for suspicious activity, especially around the debug configuration endpoint.
  • Consider using network segmentation to isolate the router from critical internal systems.
  • Apply the principle of least privilege by disabling unnecessary services and features on the router.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.