CVE-2022-38826: OS Command Injection
Published Sep 16, 2022
·Updated
In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi.
Affected Software
2 affected components
TOTOLINK T6 Firmware=4.1.5cu.709_b20210518
TOTOLINK T6=3
Event History
Sep 16, 2022
CVE Published
via MITRE·02:15 PM
Data Sourced
via MITRE·02:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-38826?
CVE-2022-38826 is classified as a high severity vulnerability due to the potential for arbitrary command execution.
2
How do I fix CVE-2022-38826?
To fix CVE-2022-38826, update the TOTOLINK T6 firmware to a version that addresses this vulnerability.
3
What does CVE-2022-38826 affect?
CVE-2022-38826 affects TOTOLINK T6 devices running firmware version 4.1.5cu.709_B20210518.
4
What type of vulnerability is CVE-2022-38826?
CVE-2022-38826 is an arbitrary command execution vulnerability found in cstecgi.cgi.
5
Can CVE-2022-38826 be exploited remotely?
Yes, CVE-2022-38826 can potentially be exploited remotely, making it critical to apply patches immediately.