Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2022-28495
HistoryMar 24, 2023 - 12:00 a.m.

CVE-2022-28495

2023-03-2400:00:00
mitre
www.cve.org
5
cve-2022-28495
totolink
cpe cp900
command injection
vulnerability
setwebwlanidx
webwlanidx
arbitrary commands
crafted request

EPSS

0.008

Percentile

81.6%

JSON

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Related

cve 1
nvd 1
prion 1
cve
cve
CVE-2022-28495
2023-03-24 14:15:09
nvd
nvd
CVE-2022-28495
2023-03-24 14:15:09
prion
prion
Command injection
2023-03-24 14:15:00

EPSS

0.008

Percentile

81.6%

JSON
Related for CVELIST:CVE-2022-28495
cve1nvd1prion1