| Title | TOTOLINK AC1200 T8 V4.1.5cu.862_B20230228 OS Command Injection |
|---|
| Description | Weakness in setDiagnosisCfg allows attacker to bypass validity_check and manipulate system's os command |
|---|
| Source | ⚠️ https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md |
|---|
| User | FPT IS Security (UID 72751) |
|---|
| Submission | 08/14/2024 09:31 (2 years ago) |
|---|
| Moderation | 08/22/2024 14:21 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 275557 [TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 setDiagnosisCfg os command injection] |
|---|
| Points | 15 |
|---|