CVE-2024-8075: TOTOLINK AC1200 T8 setDiagnosisCfg os command injection
A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg. The manipulation leads to os command injection. The attack can be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8075?
CVE-2024-8075 is classified as a critical vulnerability.
How do I fix CVE-2024-8075?
To fix CVE-2024-8075, update the TOTOLINK AC1200 T8 firmware to a version that addresses this vulnerability.
What type of attack is possible with CVE-2024-8075?
CVE-2024-8075 allows for OS command injection attacks that can be launched remotely.
Which devices are affected by CVE-2024-8075?
CVE-2024-8075 affects devices running TOTOLINK T8 firmware version 4.1.5cu.862_B20230228.
What is the impact of CVE-2024-8075?
The impact of CVE-2024-8075 includes potential unauthorized access and control of the affected device.