CVE-2022-26187

TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function

published March 22, 2022

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A simple function in your TOTOLINK N600R is a potential villain! The pingCheck function lets attackers pull off a command injection, opening the door for all sorts of mischief. 🔥 Think of it like a restaurant that takes orders without verifying if the ingredients are safe — if the chef blindly accepts anything, they could be serving up something dangerous! An attacker could exploit this vulnerability to execute arbitrary commands on your router, giving them access to sensitive information or even controlling your network. This could lead to compromised devices or a full network takeover, which is absolutely devastating for your privacy and security!

Put simply

Think of it like a restaurant that takes orders without verifying if the ingredients are safe — if the chef blindly accepts anything, they could be serving up something dangerous! The command injection vulnerability in TOTOLINK N600R occurs through the pingCheck function, allowing attackers to send malicious commands that the router would execute without proper validation.

What to do

An attacker could exploit this vulnerability to execute arbitrary commands on your router, giving them access to sensitive information or even controlling your network. This could lead to compromised devices or a full network takeover, which is absolutely devastating for your privacy and security! To protect your network, update the firmware of your TOTOLINK N600R to the latest version provided by the manufacturer. Regularly check for updates and ensure that your router settings are secure and properly configured. 🛡️ You’ve got this! Stay vigilant and patch that router to keep your network safe! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19579 · 97.4th percentile
Published
2022-03-22T20:13Z
EPSS history
Timeline
  • 22 MAR 20:13Z
    TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function
    cvelistv5