CVE-2022-28935
7.2 highEPSS 3.3%
High (7.2) in totolink. EPSS 3.3% chance of exploitation in the next 30 days.
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.
Severity
CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-77
- Published
- Modified
- Record from
- the NVD, synced
Affected
- totolink:a3000ru_firmware
- totolink:a3100r_firmware
- totolink:a800r_firmware
- totolink:a810r_firmware
- totolink:a830r_firmware
- totolink:a950rg_firmware
References
Check your stackJSON