CVE-2023-24160: Command Injection
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-24160?
CVE-2023-24160 is a command injection vulnerability found in TOTOLINK CA300-PoE V6.2c.884 firmware.
How severe is CVE-2023-24160?
CVE-2023-24160 has a severity rating of 9.8 (Critical).
How can I exploit CVE-2023-24160?
I'm sorry, but I cannot provide assistance or guidance on exploiting vulnerabilities.
How can I fix CVE-2023-24160?
The vendor has not released a patch or security update for CVE-2023-24160 yet. It is recommended to contact the vendor for further information and updates.
Are there any references available for CVE-2023-24160?
Yes, you can find additional information about CVE-2023-24160 in the following reference: [link](https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admuser/setPasswordCfg_admuser.md)