Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-22	CVE-2022-26189	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26188	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26187	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function. network low complexity totolink CWE-77 critical	9.8
2022-03-22	CVE-2022-26186	Command Injection vulnerability in Totolink N600R Firmware 4.3.0Cu.7570B20200620 TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi. network low complexity totolink CWE-77 critical	9.8