CVE-2023-24142

TOTOLINK CA300-PoE V6.2c.884 is affected by a command injection vulnerability in the setNetworkDiag function, exploitable via the NetDiagPingSize parameter in NetDiagPingSize. The CVE-2023-24142 entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, LOW attack complexity...