2 matches found
Command injection
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...
10CVSS9.7AI score0.02541EPSS
SaveExploits1References1Affected Software1
CVE-2022-28909: Improper Neutralization of Special Elements used in an OS Command
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...
10CVSS8.2AI score0.02541EPSS
SaveExploits1References2
20