← Vulnerability feed

Vulnerability record · CVE-2022-28491 · published 23 March 2023

CVE-2022-28491: Totolink cp900 firmware os command injection vulnerability

TTotolink · Cp900 Firmware

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

9.8 CVSS 3.1 Critical EPSS 4.7% · top 8.5% CWE-78 · OS command injection
9.8CVSS 3.1 base score
4.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/B2eFly/CVE/blob/main/totolink/CP900/2/2.md ExploitThird Party Advisory
https://github.com/B2eFly/Router/blob/main/totolink/CP900/1/2.md Broken Link
https://github.com/B2eFly/CVE/blob/main/totolink/CP900/2/2.md ExploitThird Party Advisory
https://github.com/B2eFly/Router/blob/main/totolink/CP900/1/2.md Broken Link

Track CVE-2022-28491 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-28495Totolink cp900 firmware os command injection vulnerabilityTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl…EPSS 2.4%9.8CVE-2022-28496Totolink cp900 firmware command injection vulnerabilityTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminus…EPSS 1.4%9.8CVE-2022-28497Totolink cp900 firmware command injection vulnerabilityTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via th…EPSS 1.4%9.8CVE-2022-28493Totolink cp900 firmware vulnerabilityA vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,EPSS 0.68%9.8CVE-2022-28492Totolink cp900 firmware vulnerabilityTOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.EPSS 1.3%9.8CVE-2022-28494Totolink cp900 firmware os command injection vulnerabilityTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena…EPSS 2.6%8.7CVE-2024-7463Totolink cp900 firmware classic buffer overflow vulnerabilityA vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function UploadCustomModule of the file /…EPSS 11%6.3CVE-2025-44836Totolink cp900 firmware command injection vulnerabilityTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour o…EPSS 0.89%

Source: NIST National Vulnerability Database (record CVE-2022-28491), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.