CVE-2024-8077: TOTOLINK AC1200 T8 setTracerouteCfg os command injection
Published Aug 22, 2024
·Updated
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
2 affected components
All of the following
TOTOLINK T8 Firmware=4.1.5cu.862_b20230228
TOTOLINK T8
Event History
Aug 22, 2024
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8077?
CVE-2024-8077 has been classified as a critical vulnerability.
2
What type of vulnerability is CVE-2024-8077?
CVE-2024-8077 is an OS command injection vulnerability.
3
How do I fix CVE-2024-8077?
To fix CVE-2024-8077, update the TOTOLINK AC1200 T8 firmware to a patched version.
4
Can CVE-2024-8077 be exploited remotely?
Yes, CVE-2024-8077 can be exploited remotely.
5
Which firmware version is affected by CVE-2024-8077?
CVE-2024-8077 affects the TOTOLINK T8 firmware version 4.1.5cu.862_B20230228.