| |
Vulnerability CVE-2023-46993
Published: 2023-10-31
| Description: |
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection. |
References: |
https://github.com/AuroraHaaash/vul_report/blob/main/TOTOLINK%20A3300R-Command%20Injection/readme.md
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
