CVE-2022-44844: OS Command Injection
Published Nov 25, 2022
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Nov 25, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for TOTOlink A7100RU?
The vulnerability ID for TOTOlink A7100RU is CVE-2022-44844.
2
What is the severity level of CVE-2022-44844?
CVE-2022-44844 has a severity level of critical (9.8 out of 10).
3
How does the vulnerability CVE-2022-44844 manifest?
CVE-2022-44844 manifests as a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.
4
Is TOTOlink A7100RU firmware version 7.4cu.2313_b20191024 affected?
Yes, TOTOlink A7100RU firmware version 7.4cu.2313_b20191024 is affected by CVE-2022-44844.
5
How can I fix the vulnerability CVE-2022-44844 in TOTOlink A7100RU?
To fix CVE-2022-44844 in TOTOlink A7100RU, it is recommended to update the firmware to a patched version provided by the vendor.