Vulnerabilities > Totolink > N600R Firmware > 4.3.0cu.7570.b20200620

DATE CVE VULNERABILITY TITLE RISK
2022-03-22 CVE-2022-26186 Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi.
network
low complexity
totolink CWE-77
7.5
2022-03-22 CVE-2022-26187 Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.
network
low complexity
totolink CWE-77
7.5
2022-03-22 CVE-2022-26188 Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.
network
low complexity
totolink CWE-77
7.5
2022-03-22 CVE-2022-26189 Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface.
network
low complexity
totolink CWE-77
7.5