Critical · 9.8 CVE-2023-24143 EUVD-2023-28206GHSA-h8gc-xwmw-4hvj

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetw…

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function.

References

https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagTracertHop/setNetworkDiag_NetDiagTracertHop.md