CVE-2024-57212

The TOTOLINK A6000R (version V1.0.1-B20201211.2000 ) contains a command injection vulnerability (CWE-77) located in the action_reboot function. The flaw exists due to improper handling of the opmode parameter, which a remote attacker could exploit by submitting a specially crafted request to exec...