← Database

CVE-2022-48124

CRITICAL CVSS: 9.8 Published: 2023-01-20 Modified: 2026-06-17

Description

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.

Affected Platforms

Totolink A7100Ru FirmwareTotolink A7100Ru

Weakness Type

CWE-78, CWE-78

References