PT-2022-19302 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version 5.3c.7159 B20190425 Description: A command injection issue was discovered via the hosttime function in the "/setting/NTPSyncWithHost" API endpoint. This allows for potential command injection attacks. Recommendations: F...