Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2022-28497
HistoryMar 23, 2023 - 12:00 a.m.

CVE-2022-28497

2023-03-2300:00:00
mitre
www.cve.org
5
cve-2022-28497
totolink
command injection
mtd_write_bootloader
arbitrary commands

EPSS

0.087

Percentile

94.6%

JSON

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Related

prion 1
cve 1
nvd 1
prion
prion
Command injection
2023-03-23 16:15:00
cve
cve
CVE-2022-28497
2023-03-23 16:15:11
nvd
nvd
CVE-2022-28497
2023-03-23 16:15:11

EPSS

0.087

Percentile

94.6%

JSON
Related for CVELIST:CVE-2022-28497
prion1cve1nvd1