VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026

CVE-2022-28577

CVE-2022-28577

Description

It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.

Affected products

3
  • Totolink/A7100RUllm-fuzzy2 versions
    v7.4cu.2313_b20191024+ 1 more
    • (no CPE)range: v7.4cu.2313_b20191024
    • (no CPE)
  • Totolink/A7100ru Firmware
    cpe:2.3:o:totolink:a7100ru_firmware:7.4cu.2313_b20191024:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.