CVE-2022-25082
45Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 16%
from disclosure to weapon
Published on NVDFeb 22
VulnCheck+38d
exploitation probability
16%top 3% of all CVEs
observed exploitation
yesVulnCheck
TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.
Affected products
n/a · n/a