← Back to browse · API

CVE-2024-34204

Severity
CRITICAL
CVSS
9.8
EPSS
0.019
Risk score
39.87
CISA KEV
No
PoC
No
Published
2024-05-09
Modified
2025-02-13
First seen
2026-08-07
Aliases
CNVD-2026-00115, EUVD-2024-34684, GHSA-MQMX-J46X-Q6PH
Products
TOTOLINK CPE CP450 v4.1.0cu.747_B20191224, n/a:n/a n/a
Sources
cnvd CNVD-2026-00115
euvd EUVD-2024-34684

Description

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.

References