Lucene search
China National Vulnerability DatabaseCNVD-2022-17117HistoryFeb 21, 2022 - 12:00 a.m.
TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17117)
2022-02-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.141 Low
EPSS
Percentile
95.7%
TOTOLink T6 is a wireless dual-band router from TotoLink, China. recv_mesh_info_sync function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets.
Related
cve
cve
CVE-2022-25135
2022-02-19 00:15:17
cvelist
cvelist
CVE-2022-25135
2022-02-18 23:09:20
nvd
nvd
CVE-2022-25135
2022-02-19 00:15:17
prion
prion
Command injection
2022-02-19 00:15:00