PT-2022-6283 · Totolink · Totolink A7100Ru

Am1Ngl · Published 2022-12-18 · Updated 2025-04-04 · CVE-2022-47853

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TOTOlink A7100RU version 7.4cu.2313 B20191024

Description The issue is related to a Command Injection Vulnerability in the httpd service of the TOTOlink A7100RU router's firmware. This vulnerability allows an attacker to execute arbitrary commands by sending a specially constructed payload, potentially leading to the attacker obtaining a stable root shell. The vulnerability is due to the lack of proper sanitization of special elements, which can be exploited by a remote attacker.

Recommendations For TOTOlink A7100RU version 7.4cu.2313 B20191024, consider disabling the httpd service until a patch is available to prevent exploitation of the Command Injection Vulnerability. Restrict access to the router's web interface to minimize the risk of exploitation. Avoid using the router's web interface for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

OS Command Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-78

CWE-77

Related Identifiers

BDU:2023-00737

CVE-2022-47853

Affected Products

Totolink A7100Ru

References · 6

• 🔥 https://github.com/Am1ngl/ttt/tree/main/16 · Exploit
• https://bdu.fstec.ru/vul/2023-00737 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-47853 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47853 · Vendor Advisory
• https://t.me/cibsecurity/56614 · Telegram Post
• https://t.me/cvenotify/117851 · Telegram Post