PT-2023-19442
CVE-2023-24153
·
تاريخ النشر
2023-01-16
·
تاريخ التحديث
2025-03-26
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TOTOLINK T8 version 4.1.5cu
Description
A command injection issue in the
version parameter of the recvSlaveCloudCheckStatus function allows attackers to execute arbitrary commands via a crafted MQTT packet.Recommendations
For TOTOLINK T8 version 4.1.5cu, consider disabling the
recvSlaveCloudCheckStatus function until a patch is available to prevent exploitation. Restrict access to the version parameter in the affected function to minimize the risk of command injection. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾