Security Advisory

CVE-2018-13314

9.8
CRITICAL

Vulnerability Description

System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ipAddr" POST parameter.
Published Date November 27, 2018
Official Source NIST NVD Advisory