CVE-2022-28496 | TOTOLink Outdoor CPE CP900 6.3c.566_B2017102 Request setPasswordCfg adminuser/adminpass command injection

A vulnerability classified as critical was found in TOTOLink Outdoor CPE CP900 6.3c.566_B2017102. This vulnerability affects the function setPasswordCfg of the component Request Handler. The manipulation of the argument adminuser/adminpass leads to command injection. This vulnerability was named CVE-2022-28496. Access to the local network is required for this attack. There is no exploit available.