Description
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.
Unscored
CVE-2022-37843
EUVD-2022-40452GHSA-78g4-9xgp-8gg7
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without fi…
Published Sep 6, 2022 · Updated Aug 3, 2024 · Assigned by mitre