CVE-2022-28911: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate...