← Back to browse · API

CVE-2023-24152

Severity
CRITICAL
CVSS
9.8
EPSS
0.02109
Risk score
39.94
CISA KEV
No
PoC
No
Published
2023-02-03
Modified
2025-03-26
First seen
2026-08-07
Aliases
EUVD-2023-28215, GHSA-G8GP-7633-39FQ
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-28215

Description

A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

References