A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg. The manipulation leads to os command injection. The attack can be launched remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Link | Resource |
---|---|
https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md | Third Party Advisory |
https://vuldb.com/?ctiid.275557 | Permissions Required |
https://vuldb.com/?id.275557 | Third Party Advisory |
https://vuldb.com/?submit.390929 | Third Party Advisory |
https://www.totolink.net/ | Product |
Configurations
Configuration 1 (hide)
AND |
|
History
29 Aug 2024, 21:57
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 9.8 |
CPE | cpe:2.3:h:totolink:ac1200_t8:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:t8_firmware:4.1.5cu.862_b20230228:*:*:*:*:*:*:* |
|
First Time |
Totolink
Totolink t8 Firmware Totolink ac1200 T8 |
|
References | () https://github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md - Third Party Advisory | |
References | () https://vuldb.com/?ctiid.275557 - Permissions Required | |
References | () https://vuldb.com/?id.275557 - Third Party Advisory | |
References | () https://vuldb.com/?submit.390929 - Third Party Advisory | |
References | () https://www.totolink.net/ - Product |
23 Aug 2024, 16:18
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
22 Aug 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-22 20:15
Updated : 2024-08-29 21:57
NVD link : CVE-2024-8075
Mitre link : CVE-2024-8075
CVE.ORG link : CVE-2024-8075
JSON object : View
Products Affected
totolink
- t8_firmware
- ac1200_t8
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')