A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.
A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TOTOLINK
- Product
- A950RG
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-74, CWE-77
- NVD status
- Received
Why it ranks 20 (Routine)
- CVSS v3.1 9.1 critical
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-116505 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.