CVE-2022-48126

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

CVE-2022-48126

The CVE-2022-48126 entry concerns TOTOLINK A7100RU (version 7.4cu.2313_B20191024) with a command-injection flaw in the OpenVPN certificate generation flow, triggered via the username parameter in the setting/setOpenVpnCertGenerationCfg function. Public documentation consistently describes a remot...