Command Injection Vulnerability in TOTOlink A7100RU Router

CVE-2022-47853

Summary

The TOTOlink A7100RU router, specifically the version V7.4cu.2313_B20191024, is exposed to a command injection vulnerability within its httpd service. This flaw allows an attacker to execute arbitrary commands on the device, potentially leading to the acquisition of a stable root shell. By exploiting this vulnerability, malicious actors can gain unauthorized control over the router, posing significant risks to network security and user data.

References