CVE-2024-24333

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAclRules function...

CVE-2024-24333

The CVE-2024-24333 entry concerns TOTOLINK A3300R, affected firmware version 17.0.0cu.557_B20221024. A command injection vulnerability exists in the setWiFiAclRules function, exploitable via the desc parameter, allowing arbitrary command execution. Several connected sources (CNVD, Red Hat advisor...