3 matches found
Command injection
TOTOLINK A810R V5.9c.4050B20190424 was discovered to contain a command injection vulnerability via the component downloadFile.cgi...
4.3CVSS7.9AI score0.0137EPSS
SaveExploits1References1Affected Software1
CVE-2022-25082
TOTOLink A950RG V5.9c.4050B20190424 and V4.1.2cu.5204B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
9.8CVSS7.6AI score0.15673EPSS
SaveIn wildExploits1References3
Command injection
TOTOLink A950RG V5.9c.4050B20190424 and V4.1.2cu.5204B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
7.5CVSS10AI score0.15673EPSS
SaveExploits1References1Affected Software1
20