Command Injection Vulnerability in TOTOLINK NR1800X
CVE-2022-44252
9.8CRITICAL
What is CVE-2022-44252?
TOTOLINK NR1800X V9.1.0u.6279_B20210910 is vulnerable to command injection through the FileName parameter in the setUploadSetting function. Attackers can exploit this vulnerability to execute arbitrary commands on the device, potentially compromising its integrity and allowing unauthorized access or manipulation. This issue highlights the importance of securing network devices against input validation vulnerabilities to protect user data and maintain system security.