Vulnerability — CVE-2022-28494

CVE-2022-28494

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-28494
Description:: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Last updated date:: 08/08/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/28/2023
Reference url to background: https://github.com/B2eFly/CVE/blob/main/totolink/CP900/5/5.md