CVE-2022-38308: Totolink a7000ru Firmware

Critical severity, CVSS 9.8. EPSS: 21.2% chance of exploitation in the next 30 days.

TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload.

Affected products

• Totolink a7000ru Firmware: version 7.4cu.2313_b20191024 only

Published 2022-09-14. Last modified 2026-06-17.