CVE-2022-36458

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36458

TOTOLINK A3700R (firmware 9.1.2u.6134_B20201202) contains a command injection in setTracerouteCfg via the command parameter. The CVE-2022-36458 entry notes a local, low-privilege attack with high impact on confidentiality, integrity, and availability. No exploit details or available fixes are pro...