Critical severity9.8NVD Advisory· Published Feb 3, 2023· Updated Jun 17, 2026
CVE-2023-24156
CVE-2023-24156
Description
A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*
- TOTOLINK/T8description
Patches
Vulnerability mechanics
References
1- github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveUpgstatus/recvSlaveUpgstatus.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.