Unrated severityNVD Advisory· Published Feb 3, 2023· Updated Mar 26, 2025

CVE-2023-24157

Description

A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TOTOLINK/T8description
Totolink/T8llm-fuzzy
Range: = V4.1.5cu

Patches

Vulnerability mechanics

References

github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/updateWifiInfo/updateWifiInfo.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000