CVE-2022-48122

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function...

CVE-2022-48122

CVE-2022-48122 affects TOTOLINK A7100RU (OS version 7.4cu.2313_B20191024). The vulnerability is a command injection via the dayvalid parameter in the setting/delStaticDhcpRules function, enabling network-adjacent attacker access with high impact (C/H/I/A: high). CVSS v3.1 base score 9.8 (network,...