PT-2024-25739 · Totolink · Totolink Outdoor Cpe Cp450
CVE-2024-34204
·
Published
2024-05-09
·
Updated
2024-08-01
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
TOTOLINK outdoor CPE CP450 version 4.1.0cu.747 B20191224
Description
A command injection issue was found in the setUpgradeFW function via the
FileName parameter.Recommendations
For version 4.1.0cu.747 B20191224, consider restricting access to the setUpgradeFW function until a patch is available. Avoid using the
FileName parameter in the affected function to minimize the risk of exploitation.Exploit
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Totolink Outdoor Cpe Cp450