CVE-2023-24143

CVE-2023-24143 affects TOTOLINK CA300-PoE (V6.2c.884). A command injection vulnerability exists in the NetDiagTracertHop parameter of the setNetworkDiag function. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, no user interaction required, and impacts to confid...

TOTOLINK CA300-PoE 命令注入漏洞

The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which is caused by a command injection issue in the NetDiagTracertHop parameter of the setNetworkDiag method...