← Back to browse · API

CVE-2023-24153

Severity
CRITICAL
CVSS
9.8
EPSS
0.02109
Risk score
39.94
CISA KEV
No
PoC
No
Published
2023-02-03
Modified
2025-03-26
First seen
2026-08-07
Aliases
EUVD-2023-28216, GHSA-PF6Q-5RCV-C82P
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-28216

Description

A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

References