high7.8
CVE-2022-36459
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
Impact
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3700r Firmware | Version 9.1.2u.6134_b20201202 |