CVE-2023-24138

creationtimestamp| type| source ---|---|--- 2023-02-03 18:20:41+00:00| seen| https://t.me/cibsecurity/57451 2025-03-25 20:24:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8752...

CVE-2023-24138

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...

CVE-2023-24138

The CVE-2023-24138 entry concerns TOTOLINK CA300-PoE with firmware V6.2c.884. The vulnerability is a command injection in NTPSyncWithHost via the host_time parameter affecting the NTPSyncWithHost function. Affected component: host_time handling in that function. Impact as per sources: Confidentia...

CVE-2023-24138

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...