CVE-2022-25135

A command injection vulnerability in the function recvmeshinfosync of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25135

A command injection vulnerability in the function recvmeshinfosync of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25135

The CVE-2022-25135 entry relates to a command-injection flaw in TOTOLINK T6 routers. Affected component is the function recv_mesh_info_sync in TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015. An attacker can exploit this via a crafted MQTT packet to execute arbitrary comman...