Command injection

2022-02-1900:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.141 Low

EPSS

Percentile

95.7%

JSON

A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

CPENameOperatorVersion
t6_firmwareeqv4.1.5cu.748-b20211015

CPE	Name	Operator	Version
	t6_firmware	eq	v4.1.5cu.748-b20211015

References

exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2022-25135

github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_19/19.md