Command Injection Vulnerability in TOTOLINK A3300R Router

CVE-2024-24333

Summary

The TOTOLINK A3300R router has been identified to have a command injection vulnerability that allows attackers to exploit the desc parameter within the setWiFiAclRules function. This vulnerability can lead to unauthorized command execution, potentially compromising the affected device's security and enabling attackers to manipulate network settings or gain unauthorized access. Securing devices against such vulnerabilities is critical to maintaining the integrity of home and office networking environments.

References