← Back to browse · API

CVE-2023-24142

Severity

CRITICAL

CVSS

9.8

EPSS

0.01946

Risk score

39.88

CISA KEV

No

PoC

No

Published

2023-02-03

Modified

2025-03-26

First seen

2026-08-07

Aliases

EUVD-2023-28205, GHSA-C5V9-4F44-PWRX

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-28205

Description

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function.

References