First published: Tue Jan 30 2024(Updated: )
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Totolink A3300r Firmware | =17.0.0cu.557_b20221024 | |
TOTOLINK A3300R |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-24332 is classified as a high severity command injection vulnerability.
To fix CVE-2024-24332, update the TOTOLINK A3300R firmware to the latest version provided by the manufacturer.
CVE-2024-24332 allows attackers to execute arbitrary commands on the TOTOLINK A3300R router, potentially compromising the device security.
CVE-2024-24332 is specific to the TOTOLINK A3300R firmware version 17.0.0cu.557_B20221024 and may not be prevalent across other devices.
You can verify if your device is affected by checking if it is running the TOTOLINK A3300R firmware version 17.0.0cu.557_B20221024.