CVE-2022-36460

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

CVE-2022-36460

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...

CVE-2022-36460

CVE-2022-36460 affects TOTOLINK A3700R (V9.1.2u.6134_B20201202). The issue is a command injection vulnerability in the UploadFirmwareFile function via the FileName parameter, enabling potential arbitrary command execution on the device. Public sources (NVD/Red Hat/CNNVD) corroborate a high-severi...