Lucene search
HistorySep 29, 2022 - 12:15 p.m.
CVE-2022-40475
cve-2022-40475
totolink
a860r
command injection
cgi
downloadfile
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.449 Medium
EPSS
Percentile
97.4%
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
Affected configurations
Node
totolinka860r_firmwareMatch4.1.2cu.5182_b20201027
totolinka860rMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| totolink:a860r_firmware | totolink a860r firmware | eq | 4.1.2cu.5182_b20201027 |
Social References
More
Related
prion
prion
Command injection
2022-09-29 12:15:00
cnvd
cnvd
TOTOLINK A860R Command Injection Vulnerability
2022-10-08 00:00:00
nvd
nvd
CVE-2022-40475
2022-09-29 12:15:11
cvelist
cvelist
CVE-2022-40475
2022-09-29 11:37:10
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.449 Medium
EPSS
Percentile
97.4%
Related for CVE-2022-40475