CVE-2022-40475 - TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi

CRITICAL

TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi

Published Sep 29, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 3.96%

TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43753		Advisory
https://github.com/1759134370/iot/blob/main/TOTOLINK/A860R/6.md		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 29, 2022

Updated May 21, 2025

Reserved Sep 11, 2022

Updated May 21, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Sep 29, 2022

Updated May 21, 2025

Exploited since n/a