← Database

CVE-2022-28905

CRITICAL CVSS: 9.8 Published: 2022-05-10 Modified: 2026-06-17

Description

TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName.

Affected Platforms

Totolink N600RTotolink N600R Firmware

Weakness Type

CWE-78

References