PT-2022-6527 · Totolink · Totolink A7000R+1

Published 2022-03-15 · Updated 2024-09-12 · CVE-2022-27003

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Totolink routers X5000R version 9.1.0u.6118 B20201102 Totolink routers A7000R version 9.1.0u.6115 B20201022

Description The issue is related to a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This allows attackers to execute arbitrary commands via a crafted request, potentially enabling remote execution of arbitrary code.

Recommendations For Totolink routers X5000R version 9.1.0u.6118 B20201102, consider disabling the Tunnel 6rd function until a patch is available. For Totolink routers A7000R version 9.1.0u.6115 B20201022, restrict access to the relay6rd parameter in the Tunnel 6rd function to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-02026

CVE-2022-27003

Affected Products

Totolink A7000R

Totolink X5000R

References · 7

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/totolink/vuln_32/32.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-27003 · Security Note
• https://nvd.nist.gov/vuln/detail/cve-2022-27003 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27003 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02026 · Security Note
• https://t.me/cvenotify/94327 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022031804 · Note