Command injection

2022-08-2515:15:00

PRIOn knowledge base

www.prio-n.com

totolink a3600r command injection cstecgi.cgi vulnerability

0.002 Low

EPSS

Percentile

57.3%

TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.

CPENameOperatorVersion
a3600r_firmwareeq4.1.2cu.5182-b20201102

CPE	Name	Operator	Version
	a3600r_firmware	eq	4.1.2cu.5182-b20201102

References

github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3600R/1/readme.md

0.002 Low

EPSS

Percentile

57.3%

Related for PRION:CVE-2022-36455