CVE-2022-32993: Critical severity TOTOLINK A7000R firmware vulnerability

Published Aug 29, 2022

Updated

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

Affected Software

4 affected components

TOTOLINK A7000R firmware=4.1cu.4134

TOTOLINK A7000R

All of the following

TOTOLINK A7000R firmware=4.1cu.4134

TOTOLINK A7000R

Event History

Aug 29, 2022

CVE Published

via MITRE·08:12 PM

Data Sourced

via MITRE·08:12 PM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2022-32993?

CVE-2022-32993 is a vulnerability found in TOTOLINK A7000R V4.1cu.4134 firmware, which allows unauthorized access via /cgi-bin/ExportSettings.sh.

How severe is CVE-2022-32993?

CVE-2022-32993 has a severity rating of 9.8 out of 10, making it a critical vulnerability.

How does CVE-2022-32993 affect TOTOLINK A7000R?

CVE-2022-32993 affects TOTOLINK A7000R V4.1cu.4134 firmware, allowing unauthorized access through the /cgi-bin/ExportSettings.sh endpoint.

What is the affected software version for CVE-2022-32993?

The affected software version for CVE-2022-32993 is TOTOLINK A7000R V4.1cu.4134 firmware.

Is TOTOLINK A7000R vulnerable to CVE-2022-32993?

Yes, TOTOLINK A7000R V4.1cu.4134 firmware is vulnerable to CVE-2022-32993.

Where can I find more information about CVE-2022-32993?

You can find more information about CVE-2022-32993 on the TOTOLINK website (http://totolink.com) and the POC repository on GitHub (https://github.com/laotun-s/POC/blob/main/CVE-2022-32993.txt).