Command Injection Vulnerability in Totolink A830R Router

CVE-2022-48069

Summary

The Totolink A830R router, specifically version V4.1.2cu.5182, is susceptible to a command injection vulnerability through the QUERY_STRING parameter. This flaw allows an attacker to execute arbitrary commands on the device, potentially leading to unauthorized access and manipulation of the router's settings. Remediation steps should be taken to secure the device and mitigate risks associated with this vulnerability.

References