CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

CVE-2022-32449

creationtimestamp| type| source ---|---|--- 2022-07-07 22:15:45+00:00| seen| https://t.me/cibsecurity/45774...

CVE-2022-32449

TOTOLINK EX300V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet...

CVE-2022-32449

CVE-2022-32449 affects TOTOLINK EX300_V2 (V4.0.3c.7484). The vulnerability is a command-injection in the setLanguageCfg function via the langType parameter, exploitable via a crafted MQTT data packet. Impact is high (C, I, A) with network access and no authentication required per listed CVSS 3.1 ...