CVE-2024-35401

Publication date

2024-05-28 16:22:37

Family

mitre

State

PUBLISHED

Description

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.