CVE-2022-44251: OS Command Injection
Published Nov 23, 2022
·Updated
TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the ussd parameter in the setUssd function.
Affected Software
4 affected components
TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309
TOTOLINK LR350
All of the following
TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309
TOTOLINK LR350
Event History
Nov 23, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this TOTOLINK NR1800X vulnerability?
The vulnerability ID of this TOTOLINK NR1800X vulnerability is CVE-2022-44251.
2
What is the severity of CVE-2022-44251?
The severity of CVE-2022-44251 is critical with a CVSS score of 9.8.
3
How does the TOTOLINK NR1800X vulnerability impact the system?
The TOTOLINK NR1800X vulnerability allows command injection via the ussd parameter in the setUssd function, which can be exploited by an attacker to execute arbitrary commands on the system.
4
Which software versions are affected by the TOTOLINK NR1800X vulnerability?
TOTOLINK NR1800X V9.1.0u.6279_B20210910 is affected by the vulnerability.
5
How can I fix the TOTOLINK NR1800X vulnerability?
To fix the TOTOLINK NR1800X vulnerability, it is recommended to update the firmware to a version that includes the security patches.