CVE-2022-37078: Command Injection
Published Aug 25, 2022
·Updated
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.
Affected Software
2 affected components
TOTOLINK A7000R firmware=9.1.0u.6115_b20201022
TOTOLINK A7000R
Event History
Aug 25, 2022
CVE Published
via MITRE·02:03 PM
Data Sourced
via MITRE·02:03 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID for this vulnerability is CVE-2022-37078.
2
What is the severity rating of CVE-2022-37078?
The severity rating of CVE-2022-37078 is 7.8 (High).
3
What is the affected software for CVE-2022-37078?
The affected software for CVE-2022-37078 is Totolink A7000r Firmware version 9.1.0u.6115_b20201022.
4
What is the CWE ID for CVE-2022-37078?
The CWE ID for CVE-2022-37078 is CWE-77 and CWE-787.
5
Is there a fix available for CVE-2022-37078?
There is currently no fix available for CVE-2022-37078. It is recommended to follow the vendor's advisory for updates and patches.