totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the \ping\ command and the input field does not adequately filter special symbols. This can lead to command injection attacks.