TOTOLINK Routers Command Injection (CVE-2022-26206; CVE-2022-26207; CVE-2022-26208; CVE-2022-26209; CVE-2022-26211; CVE-2022-26212; CVE-2022-26214; CVE-2022-27003; CVE-2022-27004; CVE-2022-27005; CVE-2022-28935)

A command injection vulnerability exists in TOTOLINK Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-26214

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This...

CVE-2022-26214

The CVE-2022-26214 issue affects multiple Totolink routers (A830R 5.9c.4729_B20191112; A3100R 4.1.2cu.5050_B20200504; A950RG 4.1.2cu.5161_B20200903; A800R 4.1.2cu.5137_B20200730; A3000RU 5.9c.5185_B20201128; A810R 4.1.2cu.5182_B20201026). Description and connected advisories indicate a command in...