CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...

CVE-2022-37081

CVE-2022-37081 affects TOTOLINK A7000R (version 9.1.0u.6115_B20201022). A command injection vulnerability exists in the API endpoint setting/setTracerouteCfg, exploitable via the command parameter. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack compl...