Command injection

It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

Command injection

It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

Command injection

It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows attackers to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28583

It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28583

CVE-2022-28583 affects TOTOLINK A7100RU routers running firmware 7.4cu.2313_b20191024. The vulnerability is a command injection in the setWiFiWpsCfg interface that allows an attacker to execute arbitrary commands via a crafted payload. This is a network-accessible issue with high impact on confid...

CVE-2022-28582

It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28581

It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28581

The CVE-2022-28581 entry concerns a command injection vulnerability in the setWiFiAdvancedCfg interface of the TOTOLINK A7100RU router (firmware v7.4cu.2313_b20191024). According to connected sources, an attacker can trigger arbitrary command execution through a crafted payload, enabling impact o...

CVE-2022-28580

It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28580

CVE-2022-28580 affects TOTOLINK A7100RU router (firmware v7.4cu.2313_b20191024). A vulnerability in the setL2tpServerCfg interface enables command injection and can let an unauthenticated attacker execute arbitrary commands via a crafted payload. Multiple sources corroborate the flaw and affected...

CVE-2022-28579

CVE-2022-28579: A command-injection vulnerability in TOTOLINK A7100RU’s setParentalRules interface (firmware 7.4cu.2313_b20191024) allows unauthenticated or remote exploitation via a crafted payload to run arbitrary commands. Impact is described as arbitrary code execution with high confidentiali...

CVE-2022-28579

It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28578

It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28577

It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28577

CVE-2022-28577 affects the TOTOLINK A7100RU router, specifically version 7.4cu.2313_b20191024. The vulnerability is a command injection in the delParentalRules interface , allowing an attacker to execute arbitrary commands on the device. The issue is rooted in how the interface handles crafted pa...

CVE-2022-28575

It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows attackers to execute arbitrary commands through a carefully constructed payload...

CVE-2022-28575

The CVE-2022-28575 entry concerns a command-injection vulnerability in the TOTOLINK A7100RU router. Affected component: setopenvpnclientcfg interface. Root cause: input handling allows arbitrary command execution when a carefully crafted payload is sent. Affected firmware: TOTOLINK A7100RU v7.4cu...

CVE-2022-28584

CVE-2022-28584 affects TOTOLINK A7100RU router (firmware 7.4cu.2313_b20191024). The vulnerability is a command injection in the setWiFiWpsStart interface that could allow an attacker to execute arbitrary commands. CVSS data from NVD indicates NETWORK access, no authentication, low attack complexi...

CVE-2022-28584

It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU v7.4cu.2313b20191024 router, which allows an attacker to execute arbitrary commands through a carefully constructed payload...

PT-2022-19086 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 b20191024 Description: A command injection issue is found in the setParentalRules interface, allowing an attacker to execute arbitrary commands through a carefully constructed payload. Recommendations: For...