CVE-2022-28491 | TOTOLink outdoor CPE CP900 6.3c.566_B20171026 Request NTPSyncWithHost host_name command injection (EUVD-2022-32933)

A vulnerability described as critical has been identified in TOTOLink outdoor CPE CP900 6.3c.566_B20171026. This affects the function NTPSyncWithHost of the component Request Handler. Such manipulation of the argument host_name leads to command injection. This vulnerability is documented as CVE-2022-28491. The attack requires being on the local network. There is not any exploit available.