CVE-2022-25134

CVSS 3.1: 9.8 critical
EPSS: 3%p87
Published: Feb 19, 2022 · Feb 19, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-25134 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

Vendors: totolink

Products: t6 firmware

Weakness: CWE-77

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

1 story

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024VulnerabilityExploitedCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+202 · 1 read