Skip to content
OpenAdvisories
Unscored CVE-2022-38308 EUVD-2022-40898GHSA-4h2c-7x4j-46xr

TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cs…

Published Sep 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.

References