Vulnerabilities > Totolink > A7100Ru Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-05-05 CVE-2022-28584 OS Command Injection vulnerability in Totolink A7100Ru Firmware 7.4Cu.2313B20191024
It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
network
low complexity
totolink CWE-78
critical
 9.8
9.8