← Back to browse · API

CVE-2023-24145

Severity

CRITICAL

CVSS

9.8

EPSS

0.01799

Risk score

39.83

CISA KEV

No

PoC

No

Published

2023-02-03

Modified

2025-03-26

First seen

2026-08-07

Aliases

EUVD-2023-28208, GHSA-RC84-QXHW-G5RX

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-28208

Description

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function.

References