Description
TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.
Unscored
CVE-2022-32449
EUVD-2022-35521GHSA-83cm-g6q5-c98f
TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg…
Published Jul 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre