CVE-2022-25136

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25136

creationtimestamp| type| source ---|---|--- 2022-02-19 02:38:48+00:00| seen| https://t.me/cibsecurity/37812...

CVE-2022-25136

CVE-2022-25136 : A command-injection flaw exists in the meshSlaveUpdate function of TOTOLINK routers. Affected devices include T6 series (V3 firmware, V4.1.5cu.748_B20211015) and T10 series (V2 firmware, V4.1.8cu.5207_B20210320). The vulnerability allows an attacker to execute arbitrary commands ...