CVE-2024-34205

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the downloadfirmware function...

CVE-2024-34205

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the downloadfirmware function...

CVE-2024-34205

CVE-2024-34205 affects TOTOLINK CP450, specifically version 4.1.0cu.747_B20191224, which has a command injection vulnerability in the download_firmware function. The issue is attributed to improper handling/filtering of commands in the firmware download path, enabling command execution with netwo...