TOTOLINK Routers Command Injection (CVE-2022-26206; CVE-2022-26207; CVE-2022-26208; CVE-2022-26209; CVE-2022-26211; CVE-2022-26212; CVE-2022-26214; CVE-2022-27003; CVE-2022-27004; CVE-2022-27005; CVE-2022-28935)

A command injection vulnerability exists in TOTOLINK Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-27005

CVE-2022-27005 affects Totolink X5000R (version 9.1.0u.6118_B20201102) and Totolink A7000R (version 9.1.0u.6115_B20201022). The Red Hat/PRION/CVE ecosystem entries describe a command-injection in the setWanCfg function via the hostName parameter, enabling arbitrary command execution through a cra...