N600R Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-05	CVE-2022-27411	Unspecified vulnerability in Totolink N600R Firmware 5.3C.5507B20171031 TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter in the "Main" function. network low complexity totolink critical	9.8
2022-03-22	CVE-2022-26186	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26187	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26188	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26189	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface. network low complexity totolink CWE-77 critical	9.8