PT-2026-120890 · Totolink · A950Rg
CVSS v3.1
10
حرجة
| المتجه | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.
استغلال
إصلاح
Special Elements Injection
Command Injection
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
A950Rg