high7.8
CVE-2022-36456
TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
Impact
TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A720r Firmware | Version 4.1.5cu.532_b20210610 |