CVE-2022-37078

creationtimestamp| type| source ---|---|--- 2022-08-25 18:30:14+00:00| seen| https://t.me/cibsecurity/48750...

CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg...

CVE-2022-37078

The CVE-2022-37078 entry relates to TOTOLINK A7000R (version 9.1.0u.6115_B20201022) and a vulnerability in the /setting/setLanguageCfg API where the lang parameter enables command injection. The connected records specify the affected component and root cause (improper handling of the lang paramet...