medium6.3
CVE-2024-53333
TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function.
Impact
TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnerability allows an attacker to execute arbitrary commands via the "ussd" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Ex200 Firmware | Version 4.0.3c.7646_b20201211 |