CVE-2022-36485

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...

CVE-2022-36485

CVE-2022-36485 affects TOTOLINK N350RT, specifically version 9.3.5u.6139_B20201216. A command-injection vulnerability exists in the hostName parameter of the setOpModeCfg function. The NVD metrics indicate a high-severity impact (CVSS 3.1: AV LOCAL, AC LOW, PR LOW, UI NONE, S U, C/H/I/A = HIGH). ...