An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.Referenceshttps://www.totolink.net/https://github.com/zxsssd/TotoLink-