CVE-2023-24156

creationtimestamp| type| source ---|---|--- 2023-02-03 18:21:05+00:00| seen| https://t.me/cibsecurity/57466...

CVE-2023-24156

A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2023-24156

A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2023-24156

CVE-2023-24156 affects TOTOLINK T8 (firmware V4.1.5cu). The vulnerability is a command injection in the ip parameter of the recvSlaveUpgstatus function, exploitable via a crafted MQTT packet. Underlying issue: input not properly filtered, enabling arbitrary command execution with high impact (con...

CVE-2023-24156

A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...