critical9.8
CVE-2022-28907
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.
Impact
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | N600r Firmware | Version 5.3c.7159_b20190425 |