critical9.8
CVE-2022-28906
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.
Impact
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | N600r Firmware | Version 5.3c.7159_b20190425 |