CVE-2024-35401

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...

CVE-2024-35401

The TOTOLINK CP900L (version 4.1.5cu.798_B20221228 ) is susceptible to a command injection vulnerability. The root cause is the UploadFirmwareFile function's failure to correctly filter special characters and commands within the FileName parameter. This flaw could allow an attacker to execute arb...