CVE:CVE-2022-25130
CNNVD:CNNVD-202202-1639
TotoLink routers是中国台湾吉翁电子（TotoLink）公司的一个路由器。
TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 存在命令注入漏洞，该漏洞允许攻击者通过精心制作的 MQTT 数据包执行任意命令。
solution:Upgrade totolink t6_firmware to a higher version than v4.1.5cu.748_b20211015,and avoid the version v4.1.5cu.748_b20211015; Upgrade totolink t10_firmware to a higher version than v4.1.8cu.5207_b20210320,and avoid the version v4.1.8cu.5207_b20210320