← Back to browse · API

CVE-2023-24148

Severity

CRITICAL

CVSS

9.8

EPSS

0.01799

Risk score

39.83

CISA KEV

No

PoC

No

Published

2023-02-03

Modified

2025-03-26

First seen

2026-08-07

Aliases

EUVD-2023-28211, GHSA-W69F-C3C3-V943

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-28211

Description

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.

References