← Back to browse · API

CVE-2023-24154

Severity

CRITICAL

CVSS

9.8

EPSS

0.01946

Risk score

39.88

CISA KEV

No

PoC

No

Published

2023-02-03

Modified

2025-03-26

First seen

2026-08-07

Aliases

EUVD-2023-28217, GHSA-CHWW-FV2R-XW5X

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-28217

Description

TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.

References