First published: Mon Jul 22 2024(Updated: )
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Totolink A6000R Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-41320 is classified as a high severity command injection vulnerability.
To fix CVE-2024-41320, update your TOTOLINK A6000R firmware to the latest version provided by the vendor.
CVE-2024-41320 is a command injection vulnerability affecting the ifname parameter in the get_apcli_conn_info function.
Exploitation of CVE-2024-41320 could allow an attacker to execute arbitrary commands on the affected device.
CVE-2024-41320 affects the TOTOLINK A6000R with the firmware version V1.0.1-B20201211.2000.