Command Injection Vulnerability in TOTOLINK A3300R Router

CVE-2024-24332

Summary

The TOTOLINK A3300R router is affected by a command injection vulnerability that arises from improper handling of the 'url' parameter in the setUrlFilterRules function. This flaw allows an attacker to execute arbitrary commands on the affected system. By crafting a malicious request, an unauthorized user could potentially manipulate the router's configuration or perform other unintended actions. It is critical for users of the TOTOLINK A3300R to apply the latest updates and follow security best practices to mitigate the risk associated with this vulnerability.

References