High · 7.3 CVE-2024-34210 EUVD-2024-34689GHSA-55qw-5fwm-j996

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate fu…

Published May 9, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.

References

https://github.com/n0wstr/IOTVuln/tree/main/CP450/CloudACMunualUpdate_injection