cve/2022/CVE-2022-37843.md
2024-06-18 02:51:15 +02:00

682 B

CVE-2022-37843

Description

In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting in a command injection vulnerability.

POC

Reference

Github