critical9.8
CVE-2021-45738
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile.
Impact
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | X5000r Firmware | Version 9.1.0u.6118_b20201102 |