TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')