Lucene search
MitreCVELIST:CVE-2022-28494HistoryMar 23, 2023 - 12:00 a.m.
CVE-2022-28494
2023-03-2300:00:00
mitre
www.cve.org
4
totolink
command injection
vulnerability
filename parameter
arbitrary commands
EPSS
0.041
Percentile
92.3%
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Related
prion
prion
Command injection
2023-03-23 01:15:00
nvd
nvd
CVE-2022-28494
2023-03-23 01:15:11
cve
cve
CVE-2022-28494
2023-03-23 01:15:11