CVE-2021-46007

2022-03-3022:12:22

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

JSON

totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the “ping” command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.

References

a3100r.com

totolink.com

hackmd.io/t_nRWxS2Q2O7GV2E5BhQMg