CVE-2022-36486

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Aug 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-364877.8TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the functionCVE-2022-364887.8TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRulCVE-2022-364897.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.CVE-2022-36497.0A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/niCVE-2022-364907.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.CVE-2022-364917.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.CVE-2022-364927.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.CVE-2022-364937.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.CVE-2022-364947.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.CVE-2022-364957.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist.CVE-2022-364967.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.CVE-2022-364977.8H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVE-2022-36486: High severity, CVSS 7.8 | Vulnix