CVE-2022-38535

TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.75% chance of exploitation in the next 30 days, 76th percentile

Published

2022-09-15

Updated

2024-08-03

Proof-of-concept exploits (1)

• Jfox816/TOTOLINK-720R/blob/177ee39a5a8557a6bd19586731b0e624548b67ee/totolink%20720%20RCod…

References

• CVE Record
• NVD entry

Related

• CVE-2022-38534
• CVE-2022-3855
• CVE-2022-38532
• CVE-2022-38553
• CVE-2022-38530
• CVE-2022-38555