Submit #378352: TOTOLINK A3300R V17.0.0cu.557_B20221024 Command Injectioninfo

TitleTOTOLINK A3300R V17.0.0cu.557_B20221024 Command Injection
DescriptionIn the A3700R V9.1.2u.5822_B20200513 firmware has a command injection vulnerability in the FileName parameter from UploadFirmwareFile function.
Source⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3300R/UploadFirmwareFile.md
User
 yhryhryhr_miemie (UID 65492)
Submission07/21/2024 20:52 (2 years ago)
Moderation07/31/2024 14:22 (10 days later)
StatusDuplicate
VulDB entry244067 [A3300R 17.0.0cu.557_B20221024 UploadFirmwareFile file_name command injection]
Points0

Interested in the pricing of exploits?

See the underground prices here!