3 matches found
CVE-2022-25132
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...
9.8CVSS8.2AI score0.02909EPSS
SaveExploits0References1
CVE-2022-38826
In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...
9.8CVSS6AI score0.01135EPSS
SaveExploits1References2
CVE-2022-25132
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...
9.8CVSS7.5AI score0.02909EPSS
SaveExploits0References2
20