Description
TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.
Critical · 9.8
CVE-2023-24154
EUVD-2023-28217GHSA-chww-fv2r-xw5x
TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.
Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre