CVE-2022-32993

CriticalCVSS 9.8

Published: 29/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.81%

53th percentile - higher than 53% of all known CVEs

Summary

An access control issue was discovered in the TOTOLINK A7000R router running firmware version V4.1cu.4134, specifically in the /cgi-bin/ExportSettings.sh script. Lack of proper authentication allows unauthorized access to export device settings.

Risk Assessment

Unauthorized access to export settings could allow an attacker to download sensitive configuration data, including passwords and keys, leading to full compromise of the router and network.

Recommendation

Immediately update the TOTOLINK A7000R firmware to the latest available version, or apply temporary mitigations such as restricting administrative access to trusted IP addresses only.

Original NVD description (English source)

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.