Command Injection Vulnerability in TOTOLINK A3300R Router

CVE-2024-24330

Summary

The TOTOLINK A3300R router has been identified with a command injection issue that can be exploited via the 'port' or 'enable' parameters in the setRemoteCfg function. This vulnerability allows an attacker to execute arbitrary commands on the device, potentially compromising its security and gaining unauthorized access to the network. Users of the A3300R should be cautious and look for updates or patches that address this vulnerability to ensure their network remains secure.

References