3 matches found
CVE-2022-48126: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...
CVE-2022-48124: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function...
CVE-2022-48125: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function...