CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25130

CVE-2022-25130 describes a command-injection vulnerability in the TOTOLINK routers’ updateWifiInfo function. Affects T6 V3 firmware 4.1.5cu.748_B20211015 and T10 V2 firmware V4.1.8cu.5207_B20210320. An attacker can achieve arbitrary command execution by sending a crafted MQTT packet, without auth...