TOTOLINK CVE-2022-28580命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/cve-2022-28580
• https://avd.aliyun.com/detail?id=AVD-2022-28580
• https://cve.imfht.com/detail/CVE-2022-28580
• https://osv.dev/vulnerability/CVE-2022-28580
• https://dbugs.ptsecurity.com/vulnerability/PT-2022-19087

Related Vulnerabilities

• TOTOLINK EX200 /cgi-bin/cstecgi.cgi setLanguageCfg 命令执行漏洞
• TOTOLINK EX200 /cgi-bin/cstecgi.cgi NTPSyncWithHost 命令执行漏洞
• PoCCVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information Disclosure
• PoCCVE-2019-19822: TOTOLINK/Realtek Routers - Information Disclosure
• PoCCVE-2019-19823: TOTOLINK/Realtek Routers - Information Disclosure
• PoCCVE-2019-19825: TOTOLINK/Realtek Routers - CAPTCHA Bypass
• PoCCVE-2019-19824: TOTOLINK Realtek SD Routers - Remote Command Injection
• PoCCVE-2021-42887: TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass
• PoCCVE-2022-25082: TOTOLink - Unauthenticated Command Injection
• PoCCVE-2023-30013: TOTOLink - Unauthenticated Command Injection
• PoCCVE-2023-46574: TOTOLINK A3700R - Command Injection
• PoCCVE-2024-24328: TotoLink Router setMacFilterRules - Command Injection
• PoCCVE-2024-24329: TotoLink Router setPortForwardRules - Command Injection