TOTOLink A700RU Command Injection (CVE-2022-38308)

A command injection vulnerability exists in TOTOLink A700RU. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-38308

TOTOLink A700RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2022-38308

CVE-2022-38308 affects TOTOLink A700RU, specifically version V7.4cu.2313_B20191024. The vulnerability is a command injection in the OS via the parameter passed to the function cimposed?cstesystem (documentation states function cstesystem) that allows an attacker to execute arbitrary commands. Im...