CVE-2024-7464: TOTOLINK CP900 Telnet Service setTelnetCfg command injection
A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the function setTelnetCfg of the component Telnet Service. The manipulation of the argument telnetenabled leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273557 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7464?
CVE-2024-7464 has been classified as a critical vulnerability.
How do I fix CVE-2024-7464?
To mitigate CVE-2024-7464, it is recommended to upgrade to the latest firmware version that addresses this vulnerability.
What component is affected by CVE-2024-7464?
CVE-2024-7464 affects the Telnet Service's setTelnetCfg function in TOTOLINK CP900 firmware version 6.3c.566.
What kind of attack does CVE-2024-7464 facilitate?
CVE-2024-7464 allows for remote command injection due to improper handling of the telnet_enabled argument.
Which devices are affected by CVE-2024-7464?
CVE-2024-7464 specifically affects the TOTOLINK CP900 device running firmware version 6.3c.566.