Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-25082

TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.852
EPSS Ranking 99.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2022-25082
  • Totolink » A950rg » Version: N/A
    cpe:2.3:h:totolink:a950rg:-
  • Totolink » A950rg Firmware » Version: 4.1.2cu.5204_b20210112
    cpe:2.3:o:totolink:a950rg_firmware:4.1.2cu.5204_b20210112
  • Totolink » A950rg Firmware » Version: 5.9c.4050_b20190424
    cpe:2.3:o:totolink:a950rg_firmware:5.9c.4050_b20190424


Products
Pricing
Contact Us

Shodan ® - All rights reserved