Security Advisory

CVE-2023-24150

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-03 00:00:00
Last updated 2025-03-26 15:33:26
Assigner mitre
State PUBLISHED

Description

A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.