CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
References
Link Resource
https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A7000R/5 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:*
cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*

History

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-77 CWE-78

Information

Published : 2022-08-25 15:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-37079

Mitre link : CVE-2022-37079

CVE.ORG link : CVE-2022-37079


JSON object : View

Products Affected

totolink

  • a7000r
  • a7000r_firmware
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')