← Back to browse · API

CVE-2023-24156

Severity
CRITICAL
CVSS
9.8
EPSS
0.02109
Risk score
39.94
CISA KEV
No
PoC
No
Published
2023-02-03
Modified
2025-03-26
First seen
2026-08-07
Aliases
EUVD-2023-28219, GHSA-PRP5-F75M-MVWG
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-28219

Description

A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

References