High severity8.0NVD Advisory· Published Mar 26, 2024· Updated Jun 17, 2026
CVE-2024-27521
CVE-2024-27521
Description
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vulnerability via multiple parameters in the "setOpModeCfg" function. This security issue allows an attacker to take complete control of the device. In detail, exploitation allows unauthenticated, remote attackers to execute arbitrary system commands with administrative privileges (i.e., as user "root").
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.557_b20221024:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/SpikeReply/advisories/blob/main/cve/totolink/cve-2024-27521.mdnvdThird Party Advisory
- m.totolink.net/portal/article/index/id/410.htmlnvdProduct
News mentions
0No linked articles in our index yet.