Command injection

2022-03-1522:15:00

PRIOn knowledge base

www.prio-n.com

0.116 Low

EPSS

Percentile

95.3%

JSON

Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

CPENameOperatorVersion
a7000r_firmwareeq9.1.0u.6115-b20201022
x5000r_firmwareeq9.1.0u.6118-b20201102

CPE	Name	Operator	Version
	a7000r_firmware	eq	9.1.0u.6115-b20201022
	x5000r_firmware	eq	9.1.0u.6118-b20201102

References

github.com/wudipjq/my_vuln/blob/main/totolink/vuln_32/32.md

0.116 Low

EPSS

Percentile

95.3%

JSON

Related for PRION:CVE-2022-27003