critical9.8
CVE-2022-28580
It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows …
Impact
It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A7100ru Firmware | Version 7.4cu.2313_b20191024 |