Description
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.
Critical · 9.8
CVE-2023-46993
EUVD-2023-51151GHSA-q6p3-mrgw-429v
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which ca…
Published Oct 31, 2023 · Updated Sep 6, 2024 · Assigned by mitre