PT-2022-27150 · Totolink · Totolink Nr1800X
CVE-2022-44251
·
Published
2022-11-23
·
Updated
2023-08-08
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
TOTOLINK NR1800X version 9.1.0u.6279 B20210910
Description
The issue is related to a command injection via the
ussd parameter in the setUssd function. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.Recommendations
For TOTOLINK NR1800X version 9.1.0u.6279 B20210910, consider disabling the
setUssd function until a patch is available to prevent command injection via the ussd parameter.Exploit
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Totolink Nr1800X