CVE-2022-38308

TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-14

Last modified

2024-08-03

Weaknesses

CWE-78

Affected products

• A7000ru Firmware (Totolink)

References

• https://github.com/WhoisZkuan/TOTOlink-A700RU