CVE-2022-25075

CVSS 3.1: 9.8 critical
EPSS: 56%p99
Published: Feb 24, 2022 · Feb 24, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-25075 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

Vendors: totolink

Products: a3000ru firmware

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (56.2%)

In the news

6 stories

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024VulnerabilityExploitedCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+202 · 1 read

Description · NVD

In the news

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

EnemyBot malware adds new exploits to target CMS servers and Android devices

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

Enemybot, a new DDoS botnet appears in the threat landscape

Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave More Routers

Beastmode Mirai botnet now includes exploits for Totolink routers