critical9.8
CVE-2022-37843
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting i…
Impact
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A860r Firmware | Version 4.1.2cu.5182_b20201027 |