Command injection

2022-08-2514:15:00

PRIOn knowledge base

www.prio-n.com

totolink a7000r command injection vulnerability uploadfirmwarefile

0.002 Low

EPSS

Percentile

57.3%

JSON

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

CPENameOperatorVersion
a7000r_firmwareeq9.1.0u.6115-b20201022

CPE	Name	Operator	Version
	a7000r_firmware	eq	9.1.0u.6115-b20201022

References

github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/4

0.002 Low

EPSS

Percentile

57.3%

JSON

Related for PRION:CVE-2022-37076