CVE-2022-48121: OS Command Injection
Published Jan 20, 2023
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Jan 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-48121?
CVE-2022-48121 is a command injection vulnerability in TOTOlink A7100RU V7.4cu.2313_B20191024.
2
How does CVE-2022-48121 affect TOTOlink A7100RU V7.4cu.2313_B20191024?
CVE-2022-48121 allows attackers to inject commands via the rsabits parameter in the setting/delStaticDhcpRules function.
3
What is the severity of CVE-2022-48121?
The severity of CVE-2022-48121 is critical, with a CVSS score of 9.8.
4
How do I fix CVE-2022-48121?
To fix CVE-2022-48121, it is recommended to update TOTOlink A7100RU firmware to a version that includes a patch for the vulnerability.
5
Is TOTOlink A7100RU V7.4cu.2313_B20191024 vulnerable to CVE-2022-48121?
Yes, TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to CVE-2022-48121.