CVE-2023-24159

TOTOLINK CA300-PoE firmware version V6.2c.884 contains a command injection vulnerability in the setPasswordCfg function reachable via the admpass parameter (CVE-2023-24159). The NVD/Red Hat/CNNVD and related sources corroborate this CVE description across multiple feeds. The public records descri...