Description
TOTOLINK中存在命令注入漏洞，该漏洞是由于缺乏验证造成的。
TOTOLINK CVE-2022-28584命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2022-28584
https://www.nsfocus.net/vulndb/64623
https://avd.aliyun.com/detail?id=AVD-2022-28584
https://zone.ci/aliyun/ali_nvd/61585.html
https://www.variotdbs.pl/vuln/VAR-202205-0051
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0886.html
https://cve.komodosec.com/cve-list.php?search=&cvss_score_range=9&year=&has_exploit=&results_per_page=15&sort=cvss_score2&order=ascending&page_number=2033
https://feedly.com/cve/CVE-2022-28584
https://vulners.com/search/vendors/totolink/products/a7100ru%20firmware?month=12
https://cve.imfht.com/detail/CVE-2022-28584
https://bbs.kanxue.com/thread-273945.htm