NetSight
critical9.8

CVE-2022-47853

TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service.

Impact

TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.

Affected products

VendorProductAffected versions
TotolinkA7100ru Firmware
Version 7.4cu.2313_b20191024

Weakness classification

References