critical9.8
CVE-2022-28912
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW.
Impact
TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | N600r Firmware | Version 5.3c.7159_b20190425 |