Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-53559
HistoryMay 07, 2022 - 12:00 a.m.

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53559)

2022-05-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
totolink
n600r
command injection
vulnerability
main function
arbitrary commands
query_string
taiwan-based
electronics
router
exploited

EPSS

0.449

Percentile

97.4%

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics. TOTOLINK N600R has a command injection vulnerability, which originates from the β€œMain” function containing command injection, and can be exploited to execute arbitrary commands via the QUERY_STRING parameter.

EPSS

0.449

Percentile

97.4%