cbcvebase.
CVE-2022-36486
published 2022-08-25

CVE-2022-36486: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

Affected

1 ranges
VendorProductVersion rangeFixed in
totolinkn350rt_firmware——