PT-2022-12375
CVE-2021-45733
·
تاريخ النشر
2022-02-04
·
تاريخ التحديث
2022-02-04
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TOTOLINK X5000R version 9.1.0u.6118 B20201102
Description
A command injection issue was found in the
NTPSyncWithHost function, allowing attackers to execute arbitrary commands via the host time parameter.Recommendations
For TOTOLINK X5000R version 9.1.0u.6118 B20201102, consider disabling the
NTPSyncWithHost function until a patch is available to prevent exploitation. Restrict access to the host time parameter in the affected function to minimize the risk of command injection attacks. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾