Vulnerability — CVE-2022-28491

CVE-2022-28491

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-28491
Description:: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Last updated date:: 08/08/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/27/2023
Reference url to background: https://github.com/B2eFly/CVE/blob/main/totolink/CP900/2/2.md