CVE-2023-24154

TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW...

CVE-2023-24154

CVE-2023-24154 affects TOTOLINK T8 V4.1.5cu. The vulnerability is a command injection in the setUpgradeFW function, triggered by the slaveIpList parameter, due to insufficient input filtering. This allows an attacker to execute arbitrary commands with network access. Exploitation details are not ...