VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 15, 2022· Updated Jun 17, 2026

CVE-2022-26213

CVE-2022-26213

Description

Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected products

3
  • Totolink/X5000r Firmware2 versions
    cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*
    • (no CPE)
  • Totolink/X5000Rllm-fuzzy
    Range: = v9.1.0u.6118_B20201102

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.