Lucene search

K
cvelistMitreCVELIST:CVE-2023-24157
HistoryFeb 03, 2023 - 12:00 a.m.

CVE-2023-24157

2023-02-0300:00:00
mitre
www.cve.org
cve-2023-24157
command injection
totolink t8
serverip
updatewifiinfo
mqtt packet

0.027 Low

EPSS

Percentile

90.5%

A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

0.027 Low

EPSS

Percentile

90.5%

Related for CVELIST:CVE-2023-24157