CVE-2022-36481

TOTOLINK N350RT version 9.3.5u.6139_B20201216 contains a command-injection vulnerability in setDiagnosisCfg reachable via the ip parameter. Root cause: input in the ip parameter is unsafely processed, enabling arbitrary commands with local access (attack vector: LOCAL; impact: CONFIDENTIALITY, IN...