PT-2022-19319 · Totolink · Totolink A3100R+5

Published 2022-07-06 · Updated 2022-07-14 · CVE-2022-28935

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R version 4.1.2cu.5182 B20201026

Description The issue is related to a command injection vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-28935

Affected Products

Totolink A3000Ru

Totolink A3100R

Totolink A800R

Totolink A810R

Totolink A830R

Totolink A950Rg

References · 5

• 🔥 https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F · Exploit
• 🔥 https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2022-28935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28935 · Security Note
• https://t.me/cibsecurity/45637 · Telegram Post