PT-2023-30286 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: The issue arises when handling the setLedCfg request, where there is no verification for the enable parameter. This lack of verification can lead to command injection. Recommendation...