3 matches found
CVE-2022-37078: Out-of-bounds Write
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg...
7.8CVSS7.3AI score0.00898EPSS
SaveExploits1References2
Command injection
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...
10CVSS9.7AI score0.02877EPSS
SaveExploits2References1Affected Software1
CVE-2022-28906: Improper Neutralization of Special Elements used in an OS Command
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...
10CVSS8.2AI score0.02877EPSS
SaveExploits2References2
20