CVE-2022-47853

TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-01-17

Last modified

2025-04-04

Weaknesses

CWE-78

Affected products

• A7100ru Firmware (Totolink)

References

• https://github.com/Am1ngl/ttt/tree/main/16