Unrated severityNVD Advisory· Published Aug 22, 2024· Updated Aug 23, 2024

TOTOLINK AC1200 T8 setDiagnosisCfg os command injection

CVE-2024-8075

Description

A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg. The manipulation leads to os command injection. The attack can be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Totolink/AC1200 T8llm-fuzzy2 versions
= 4.1.5cu.862_B20230228+ 1 more
- (no CPE)range: = 4.1.5cu.862_B20230228
- (no CPE)range: 4.1.5cu.862_B20230228

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

vuldb.commitrethird-party-advisory
github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.totolink.netmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000