CVE-2021-45742

published 2022-02-04

CVE-2021-45742: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a720r_firmware	—	—

CWE-77