medium5.9
CVE-2024-35401
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile functio…
Impact
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Cp900l Firmware | Version 4.1.5cu.798_b20221228 |