Medium · 6.3 CVE-2024-57213 EUVD-2024-53543GHSA-vqg8-4hg9-xrq5

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action…

Published Jan 10, 2025 · Updated Jan 13, 2025 · Assigned by mitre

Description

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function.

References

https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_9_action_passwd/README.md