CVE-2023-24236

TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules...

CVE-2023-24236

The CVE-2023-24236 entry affects TOTOLINK A7100RU (V7.4cu.2313_B20191024). A command injection vulnerability exists in the PROVINCE parameter within the setting/delStaticDhcpRules workflow, enabling potential remote command execution from a network attacker. CVSS 3.1 base score 9.8 (CRITICAL) wit...