References https://access.redhat.com/security/cve/cve-2022-28578 https://www.tenable.com/cve/CVE-2022-28578/cpes https://osv.dev/vulnerability/CVE-2022-28578 https://www.clouddefense.ai/cve/2022/CVE-2022-28578 https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0886.html https://dbugs.ptsecurity.com/vulnerability/PT-2022-19085 https://vulners.com/circl/CIRCL:CVE-2022-28578 https://cve.imfht.com/detail/CVE-2022-28578?lang=en https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-28578
Related VulnerabilitiesTOTOLINK EX200 /cgi-bin/cstecgi.cgi setLanguageCfg 命令执行漏洞TOTOLINK EX200 /cgi-bin/cstecgi.cgi NTPSyncWithHost 命令执行漏洞PoCCVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information DisclosurePoCCVE-2019-19822: TOTOLINK/Realtek Routers - Information DisclosurePoCCVE-2019-19823: TOTOLINK/Realtek Routers - Information DisclosurePoCCVE-2019-19825: TOTOLINK/Realtek Routers - CAPTCHA BypassPoCCVE-2019-19824: TOTOLINK Realtek SD Routers - Remote Command InjectionPoCCVE-2021-42887: TOTOLINK EX1200T 4.1.2cu.5215 - Authentication BypassPoCCVE-2022-25082: TOTOLink - Unauthenticated Command InjectionPoCCVE-2023-30013: TOTOLink - Unauthenticated Command InjectionPoCCVE-2023-46574: TOTOLINK A3700R - Command InjectionPoCCVE-2024-24328: TotoLink Router setMacFilterRules - Command InjectionPoCCVE-2024-24329: TotoLink Router setPortForwardRules - Command Injection