Lucene search
HistoryAug 29, 2022 - 12:15 a.m.
CVE-2022-38511
cve-2022-38511
totolink
a810r
command injection
downloadfile.cgi
vulnerability
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
TOTOLINK A810R V5.9c.4050_B20190424 was discovered to contain a command injection vulnerability via the component downloadFile.cgi.
Affected configurations
Node
totolinka810r_firmwareMatch5.9c.4050_b20190424
totolinka810rMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| totolink:a810r_firmware | totolink a810r firmware | eq | 5.9c.4050_b20190424 |
Social References
More
Related
prion
prion
Command injection
2022-08-29 00:15:00
nvd
nvd
CVE-2022-38511
2022-08-29 00:15:08
cvelist
cvelist
CVE-2022-38511
2022-08-28 23:58:59
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.3%
Related for CVE-2022-38511