Command Injection Vulnerability in TOTOLINK N350RT Router
CVE-2022-36482

7.8HIGH

Key Information:

Vendor
Totolink
Status
N350rt Firmware
Vendor
CVE Published:
25 August 2022

Summary

A command injection vulnerability has been identified in the TOTOLINK N350RT router, specifically in the lang parameter of the setLanguageCfg function. This weakness allows attackers to execute arbitrary commands on the device by injecting malicious input, potentially compromising the security and functionality of the router.

References

https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N3...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.