Lucene search
China National Vulnerability DatabaseCNVD-2022-68361HistoryOct 08, 2022 - 12:00 a.m.
TOTOLINK A860R Command Injection Vulnerability
2022-10-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
0.449 Medium
EPSS
Percentile
97.4%
TOTOLINK A860R is a wireless router from China Gion Electronics (TOTOLINK).TOTOLINK A860R version V4.1.2cu.5182_B20201027 is vulnerable to command injection, which stems from the component /cgi-bin/downloadFile.cgi failing to properly filter the construct command special characters, commands, etc. An attacker could exploit this vulnerability to cause arbitrary command execution.
Related
cvelist
cvelist
CVE-2022-40475
2022-09-29 11:37:10
prion
prion
Command injection
2022-09-29 12:15:00
nvd
nvd
CVE-2022-40475
2022-09-29 12:15:11
cve
cve
CVE-2022-40475
2022-09-29 12:15:11