PT-2022-12189

Name of the Vulnerable Software and Affected Versions TOTOLINK A3100R versions =V4.1.2cu.5050 B20200504 Description A Command Injection issue exists, allowing potential exploitation via the hosTime parameter in the 'adm/ntm.asp' endpoint. Recommendations For TOTOLINK A3100R versions =V4.1.2cu.505...

TotoLink A3100R 命令注入漏洞

Totolink A3100R is a series of wireless routers from Totolink China.A command injection vulnerability exists in Totolink A3100R V4.1.2cu.5050B20200504 and prior versions, which stems from a lack of filtering and escaping of command data in the hostTime parameter in adm/ntm.asp. escaping. An...