CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

CVE-2024-41318

The TOTOLINK A6000R router, specifically version V1.0.1-B20201211.2000 , is vulnerable to a command injection flaw. The issue exists within the apcli_wps_gen_pincode function due to the failure to properly neutralize special elements in the ifname parameter. This allows a remote attacker to execu...