Critical · 9.8 CVE-2022-44844 EUVD-2022-47775GHSA-3rqf-wg29-9x59

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/se…

Published Nov 25, 2022 · Updated Apr 29, 2025 · Assigned by mitre

Description

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.

References

https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/2