critical9.8
CVE-2021-45733
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost.
Impact
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | X5000r Firmware | Version 9.1.0u.6118_b20201102 |