CVE-2022-26212: OS Command Injection
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-26212?
CVE-2022-26212 is a command injection vulnerability found in Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026.
How severe is CVE-2022-26212?
CVE-2022-26212 has a severity score of 9.8, which is considered critical.
Which software versions are affected by CVE-2022-26212?
CVE-2022-26212 affects Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026.
How can I fix CVE-2022-26212?
To fix CVE-2022-26212, it is recommended to update the firmware of Totolink A830R, A3100R, A950RG, A800R, A3000RU, and A810R to a secure version.
Where can I find more information about CVE-2022-26212?
You can find more information about CVE-2022-26212 at the following link: [link](https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_26/26.md)