CVE-2024-24326

creationtimestamp| type| source ---|---|--- 2024-01-30 16:22:06+00:00| seen| https://t.me/ctinow/176040 2024-02-01 08:16:36+00:00| seen| https://t.me/ctinow/177367 2024-02-22 08:08:01+00:00| seen| https://t.me/ctinow/190516...

CVE-2024-24326

TOTOLINK A3300R firmware V17.0.0cu.557_B20221024 is affected by a command-injection vulnerability in the setStaticDhcpRules function via the arpEnable parameter. The root cause is insufficient input filtering for constructed command characters, enabling remote command execution with network acces...