OS Command Injection Vulnerability in TOTOLINK AC1200 T8 Router

CVE-2024-8075

Summary

A serious vulnerability has been identified in the TOTOLINK AC1200 T8 router, specifically in its setDiagnosisCfg function. This flaw allows for remote command injection, enabling attackers to execute arbitrary operating system commands through manipulated requests. The potential consequences of this vulnerability are severe, as it could grant unauthorized access to sensitive information and control over the affected device. Despite early communication attempts, the vendor has yet to respond regarding this critical security issue, leaving users at risk. It is crucial for affected users to implement immediate security measures and monitor their devices for suspicious activities.

References