critical9.8

CVE-2022-48126

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGene…

Impact

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.

Affected products

Vendor	Product	Affected versions
Totolink	A7100ru Firmware	Version 7.4cu.2313_b20191024

Weakness classification

CWE-78

References

NVD record
CVE.org record
https://github.com/Am1ngl/ttt/tree/main/12
https://github.com/Am1ngl/ttt/tree/main/12