Unscored CVE-2023-37146 EUVD-2023-41066GHSA-h3vp-h9rm-55x3

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadF…

Published Jul 7, 2023 · Updated Nov 12, 2024 · Assigned by mitre

Description

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.

References

https://github.com/DaDong-G/Vulnerability_info/tree/main/TOTOLINK/lr350/2