CVE-2024-23061

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function...

CVE-2024-23061

The CVE-2024-23061 entry concerns TOTOLINK A3300R hardware. Affected component: setScheduleCfg function where the minute parameter can be abused to achieve command injection. The issue is tied to firmware version V17.0.0cu.557_B20221024. Impact is described as arbitrary command execution with hig...