CVE-2022-26207: OS Command Injection
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the ipDoamin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-26207?
CVE-2022-26207 is a command injection vulnerability found in Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R devices.
How severe is CVE-2022-26207?
CVE-2022-26207 has a severity rating of 9.8 (critical).
Which Totolink devices are affected by CVE-2022-26207?
Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R devices are affected by CVE-2022-26207.
How can I fix CVE-2022-26207?
There is currently no official patch or fix available for CVE-2022-26207. It is recommended to follow vendor advisories for updates or mitigation steps.
Where can I find more information about CVE-2022-26207?
You can find more information about CVE-2022-26207 at the following link: [https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_28/28.md](https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_28/28.md)