Vulnerability in N/a

CVE-2022-25077

TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

EPSS: 0.510 (97.9th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References