CVE-2022-25079: OS Command Injection
Published Feb 22, 2022
·Updated
TOTOLink A810R V4.1.2cu.5182B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter.
Affected Software
2 affected components
TOTOLINK A810r Firmware=4.1.2cu.5182_b20201026
TOTOLINK A810r Firmware
Remediation
Event History
Feb 22, 2022
CVE Published
via MITRE·10:44 PM
Data Sourced
via MITRE·10:44 PM
Description
Frequently Asked Questions
1
What is CVE-2022-25079?
CVE-2022-25079 is a command injection vulnerability found in the TOTOLink A810R V4.1.2cu.5182_B20201026 firmware.
2
How severe is CVE-2022-25079?
CVE-2022-25079 has a severity score of 9.8, which is considered critical.
3
Which software versions are affected by CVE-2022-25079?
TOTOLink A810R V4.1.2cu.5182_B20201026 firmware is affected by CVE-2022-25079.
4
How can an attacker exploit CVE-2022-25079?
An attacker can exploit CVE-2022-25079 by executing arbitrary commands through the QUERY_STRING parameter.
5
Is there a fix available for CVE-2022-25079?
Currently, there is no information available regarding a fix for CVE-2022-25079. It is recommended to apply security updates as soon as they become available.