CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

CVE-2024-37626

CVE-2024-37626 affects TOTOLINK A6000R, firmware version V1.0.1-B20201211.2000 . The issue is a command-injection vulnerability in the iface parameter of the vif_enable function, allowing a remote attacker to execute arbitrary code. CVSSv3.1 base score is 8.8 (HIGH) with adjacent attack vector, n...