CVE-2022-44252

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the FileName parameter in the setUploadSetting function...

CVE-2022-44252

This CVE (CVE-2022-44252) affects TOTOLINK NR1800X. Affected module: the setUploadSetting function, where the FileName parameter enables command injection. Firmware version observed: 9.1.0u.6279_B20210910. Impact described across sources is remote code execution with network access and no user in...