CVE-2024-24325

The CVE-2024-24325 entry concerns TOTOLINK A3300R, version V17.0.0cu.557_B20221024, which has a command injection vulnerability in the setParentalRules function via the enable parameter. The root cause is insufficient filtering of special characters/commands in that parameter, enabling arbitrary ...

CVE-2024-24325

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParentalRules function...