← All advisories

High severity7.8NVD Advisory· Published Aug 25, 2022· Updated Jun 17, 2026

CVE-2022-36456

CVE-2022-36456

Description

TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.

Affected products

3

Totolink/A720r Firmware
cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.532_b20210610:*:*:*:*:*:*:*
Totolink/A720Rcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V4.1.5cu.532_B20210610

Patches

Vulnerability mechanics

References

1

github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A720R/1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.