CVE-2022-37079: OS Command Injection
Published Aug 25, 2022
·Updated
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
Affected Software
2 affected components
TOTOLINK A7000R firmware=9.1.0u.6115_b20201022
TOTOLINK A7000R
Event History
Aug 25, 2022
CVE Published
via MITRE·02:03 PM
Data Sourced
via MITRE·02:03 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of TOTOLINK A7000R?
The vulnerability ID of TOTOLINK A7000R is CVE-2022-37079.
2
What is the severity of CVE-2022-37079?
The severity of CVE-2022-37079 is high with a CVSS score of 7.8.
3
What is the affected software version of TOTOLINK A7000R?
The affected software version of TOTOLINK A7000R is 9.1.0u.6115_b20201022.
4
What is the CWE ID associated with CVE-2022-37079?
The CWE ID associated with CVE-2022-37079 is CWE-77 and CWE-78.
5
Is TOTOLINK A7000R vulnerable to CVE-2022-37079?
Yes, TOTOLINK A7000R is vulnerable to CVE-2022-37079.