TOTOLink 720R Command Injection (CVE-2022-38534; CVE-2022-38535)

A command injection vulnerability exists in TOTOLink 720R. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-38535

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg function...

CVE-2022-38535

The CVE-2022-38535 entry concerns TOTOLINK-720R (v4.1.5cu.374) with a remote code execution (RCE) flaw exploitable via the setTracerouteCfg function. The vulnerability is described across multiple connected sources as affecting TOTOLINK-720R, enabling an attacker to execute arbitrary code remotel...