Vulnerability Details CVE-2022-38308
TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.349
EPSS Ranking 96.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-38308
-
cpe:2.3:h:totolink:a7000ru:-
-
cpe:2.3:o:totolink:a7000ru_firmware:7.4cu.2313_b20191024