Lucene search
China National Vulnerability DatabaseCNVD-2022-17116HistoryFeb 21, 2022 - 12:00 a.m.
TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17116)
2022-02-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.141 Low
EPSS
Percentile
95.7%
TOTOLink T6 is a wireless dual-band router from China-based TotoLink. setUpgradeFW function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets.
Related
cvelist
cvelist
CVE-2022-25134
2022-02-18 23:09:19
nvd
nvd
CVE-2022-25134
2022-02-19 00:15:17
cve
cve
CVE-2022-25134
2022-02-19 00:15:17
attackerkb
attackerkb
CVE-2022-25134
2022-02-19 00:00:00
prion
prion
Command injection
2022-02-19 00:15:00