CVE-2022-44843: OS Command Injection
Published Nov 25, 2022
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Nov 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-44843.
2
What is the severity of CVE-2022-44843?
The severity of CVE-2022-44843 is critical, with a severity value of 9.8.
3
What is the affected software for CVE-2022-44843?
The affected software for CVE-2022-44843 is TOTOlink A7100RU V7.4cu.2313_B20191024 firmware.
4
What is the CVE-2022-44843 vulnerability about?
CVE-2022-44843 is a command injection vulnerability in TOTOlink A7100RU V7.4cu.2313_B20191024 firmware, specifically in the setting/setOpenVpnClientCfg function via the port parameter.
5
Is TOTOlink A7100RU vulnerable to CVE-2022-44843?
Yes, TOTOlink A7100RU V7.4cu.2313_B20191024 firmware is vulnerable to CVE-2022-44843.