CVE-2023-24139: Command Injection
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-24139?
CVE-2023-24139 is a command injection vulnerability in the TOTOLINK CA300-PoE V6.2c.884 firmware.
How severe is CVE-2023-24139?
CVE-2023-24139 has a severity rating of 9.8 out of 10, which is classified as critical.
How does CVE-2023-24139 affect TOTOLINK CA300-PoE?
CVE-2023-24139 affects TOTOLINK CA300-PoE V6.2c.884 firmware by allowing an attacker to inject commands via the NetDiagHost parameter in the setNetworkDiag function.
How can I fix the CVE-2023-24139 vulnerability?
To fix the CVE-2023-24139 vulnerability, users should update their TOTOLINK CA300-PoE firmware to a version that does not contain the vulnerability.
Where can I find more information about CVE-2023-24139?
You can find more information about CVE-2023-24139 at the following link: [https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagHost/setNetworkDiag_NetDiagHost.md](https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagHost/setNetworkDiag_NetDiagHost.md)