2 matches found
Command injection
Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
7.5CVSS9.8AI score0.2558EPSS
SaveExploits1References1Affected Software1
CVE-2022-26213: Improper Neutralization of Special Elements used in an OS Command
Totolink X5000RFirmware v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
9.8CVSS8.5AI score0.2558EPSS
SaveExploits1References2
20