← Back to browse · API

CVE-2023-24157

Severity
CRITICAL
CVSS
9.8
EPSS
0.02109
Risk score
39.94
CISA KEV
No
PoC
No
Published
2023-02-03
Modified
2025-03-26
First seen
2026-08-07
Aliases
EUVD-2023-28220, GHSA-4XVG-7WJC-8PG5
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-28220

Description

A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

References