Command Injection Vulnerability in TOTOLINK N350RT Router

CVE-2022-36486

Summary

The TOTOLINK N350RT router is impacted by a command injection vulnerability, which occurs in the UploadFirmwareFile function via the FileName parameter. This flaw could allow an attacker to execute arbitrary commands on the device, potentially leading to unauthorized access and control of network resources. It highlights the importance of secure coding practices to prevent exploitation through firmware uploads.

References