CVE-2022-48124

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function...

CVE-2022-48124

CVE-2022-48124 affects the TOTOLINK A7100RU (version 7.4cu.2313_B20191024). The vulnerability is a command injection in the FileName parameter of the function setting/setOpenVpnCertGenerationCfg. The CVE’s metrics indicate a critical impact (CVSS v3.1: 9.8, scope UNCHANGED, confidentiality/ integ...