CVE-2023-24140

CVE-2023-24140 affects TOTOLINK CA300-PoE hardware running V6.2c.884. The issue is a command injection via the NetDiagPingNum parameter in the setNetworkDiag function. Multiple sources corroborate this vulnerability, with a high-severity CVSS v3.1 score (9.8, Network, no authentication, user inte...

CVE-2023-24143

CVE-2023-24143 affects TOTOLINK CA300-PoE (V6.2c.884). A command injection vulnerability exists in the NetDiagTracertHop parameter of the setNetworkDiag function. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, no user interaction required, and impacts to confid...