PT-2022-12384
CVE-2021-45742
·
تاريخ النشر
2022-02-04
·
تاريخ التحديث
2022-02-04
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOTOLINK A720R version 4.1.5cu.470 B20200911
Description
The issue allows attackers to execute arbitrary commands via the
QUERY STRING parameter in the "Main" function. This is a command injection vulnerability.Recommendations
For TOTOLINK A720R version 4.1.5cu.470 B20200911, consider restricting access to the "Main" function to minimize the risk of exploitation. Avoid using the
QUERY STRING parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾