Critical severity9.8NVD Advisory· Published Mar 24, 2023· Updated Jun 17, 2026
CVE-2022-28495
CVE-2022-28495
Description
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- TOTOLink/outdoor CPE CP900description
Patches
Vulnerability mechanics
References
2- github.com/B2eFly/CVE/blob/main/totolink/CP900/3/3.mdnvdExploitThird Party Advisory
- github.com/B2eFly/Router/blob/main/totolink/CP900/3/3.mdnvdBroken Link
News mentions
0No linked articles in our index yet.