Lucene search
+L

8 matches found

CNVD
CNVD
•added 2024/02/02 12:00 a.m.•14 views

TOTOLINK A3300R setStaticDhcpRules Method Command Injection Vulnerability

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the failure of the arpEnable parameter of the setStaticDhcpRule...

9.8CVSS7.9AI score0.01642EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/30 3:15 p.m.•27 views

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

9.8CVSS9.8AI score0.01642EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/30 3:15 p.m.•17 views

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

9.8CVSS5.8AI score0.01642EPSS
SaveExploits1References1
CVE
CVE
•added 2024/01/30 12:00 a.m.•201 views

CVE-2024-24326

TOTOLINK A3300R firmware V17.0.0cu.557_B20221024 is affected by a command-injection vulnerability in the setStaticDhcpRules function via the arpEnable parameter. The root cause is insufficient input filtering for constructed command characters, enabling remote command execution with network acces...

9.8CVSS9.7AI score0.01642EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/01/30 12:00 a.m.•42 views

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

10AI score0.01642EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/30 12:00 a.m.•14 views

TOTOLINK A3300R 安全漏洞

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the failure of the arpEnable parameter of the setStaticDhcpRule...

9.8CVSS7.8AI score0.01642EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/30 12:00 a.m.•2 views

CVE-2024-24326: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

9.8CVSS5.9AI score0.01642EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/30 12:00 a.m.•20 views

CVE-2024-24326

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function...

8AI score0.01642EPSS
SaveExploits1References1
Rows per page
Query Builder