CVE-2022-29639

PoC —

CVSS 3.1

8.1 high

EPSS

2%p78

Published

May 18, 2022 (May 18, 2022)

Modified

Jun 17, 2026

Description

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function uci_cloudupdate_config.

Vendors: totolink
Products: a3100r firmware
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.