CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38828

CVE-2022-38828 affects TOTOLINK T6 (version 4.1.5cu.709_B20210518). The vulnerability is a command-injection in the cstecgi.cgi endpoint, enabling arbitrary command execution. CVSSv3.1 base score 9.8 (CRITICAL) with network exposure, no privileges, no user interaction required. Public sources in ...