← Back to browse · API

CVE-2022-48125

Severity
CRITICAL
CVSS
9.8
EPSS
0.01958
Risk score
39.89
CISA KEV
No
PoC
No
Published
2023-01-20
Modified
2025-04-03
First seen
2026-08-07
Aliases
EUVD-2022-50837, GHSA-MCR4-P4R2-FWPQ
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-50837

Description

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.

References