CVE-2023-31729: Totolink a3300r Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.

Affected products

• Totolink a3300r Firmware: version 17.0.0cu.557 only

Published 2023-05-18. Last modified 2026-07-09.