Command injection

2022-09-2912:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.449 Medium

EPSS

Percentile

97.4%

TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.

CPENameOperatorVersion
a860r_firmwareeq4.1.2cu.5182-b20201027

CPE	Name	Operator	Version
	a860r_firmware	eq	4.1.2cu.5182-b20201027

References

github.com/1759134370/iot/blob/main/TOTOLINK/A860R/6.md