VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 4, 2022· Updated Jun 17, 2026

CVE-2021-45742

CVE-2021-45742

Description

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

Affected products

3
  • Totolink/A720r Firmware
    cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:*
  • Totolink/A720Rcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: v4.1.5cu.470_B20200911

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.