Command Injection Vulnerability in TOTOlink A7100RU Router

CVE-2022-48126

Summary

The TOTOlink A7100RU router has been identified as susceptible to a command injection vulnerability, particularly within the username parameter of the setting/setOpenVpnCertGenerationCfg function. This flaw allows attackers to execute arbitrary commands on the device, potentially leading to unauthorized access or manipulation of the router's functionality. Organizations using this router should review their configurations and apply necessary mitigations to protect their networks.

References