← Database

CVE-2021-45733

CRITICAL CVSS: 9.8 Published: 2022-02-04 Modified: 2026-06-17

Description

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time.

Affected Platforms

Totolink X5000R FirmwareTotolink X5000R

Weakness Type

CWE-77

References