PT-2022-17090

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the isAssocPriDevice function allows attackers to execute arbitrary commands via a crafted MQTT packet. Recommendations For...

CVE-2022-25133: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...