CVE-2022-38534

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.75% chance of exploitation in the next 30 days, 76th percentile

Published

2022-09-15

Updated

2024-08-03

Proof-of-concept exploits (1)

• Jfox816/TOTOLINK-720R/blob/fb6ba109ba9c5bd1b0d8e22c88ee14bdc4a75e6b/TOTOLINK%20720%20RCod…

References

• CVE Record
• NVD entry

Related

• CVE-2022-38535
• CVE-2022-38532
• CVE-2022-38530
• CVE-2022-3855
• CVE-2022-3853
• CVE-2022-38553