CVE-2024-10654

creationtimestamp| type| source ---|---|--- 2024-11-01 13:50:29+00:00| seen| https://t.me/cvedetector/9577 2025-04-15 07:45:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8918...

CVE-2024-10654

A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be...

CVE-2024-10654

CVE-2024-10654 affects TOTOLINK LR350 up to version 9.3.5u.6369. The issue is an authorization bypass in the /formLoginAuth.htm endpoint triggered by manipulating the authCode parameter (input 1). It is a remote vulnerability with exploits disclosed publicly. Remediation per sources is to upgrade...

CVE-2024-10654 TOTOLINK LR350 formLoginAuth.htm authorization

A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be...