Critical severity9.8NVD Advisory· Published May 10, 2022· Updated Jun 17, 2026

CVE-2022-28905

Description

TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName.

Affected products

Totolink/N600r Firmware
cpe:2.3:o:totolink:n600r_firmware:5.3c.7159_b20190425:*:*:*:*:*:*:*
Totolink/N600Rcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V5.3c.7159_B20190425

Patches

Vulnerability mechanics

References

github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000