CVE-2024-34218

CWE-77 — Command Injection3 documents3 sources
Severity
3.8LOW
EPSS
7.8%
top 7.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Totolink Cp450 Firmware
Timeline
PublishedMay 14

Description

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:NExploitability: 1.2 | Impact: 2.5

Affected Packages1 packages

▶NVDtotolink/cp450_firmware4.1.0cu.747_b20191224

🔴Vulnerability Details

2
GHSA
GHSA-mxgq-2jwv-2cc8: TOTOLINK outdoor CPE CP450 v4↗2024-05-14
▶
CVEList
CVE-2024-34218: TOTOLINK outdoor CPE CP450 v4↗2024-05-09
▶
CVE-2024-34218 (LOW CVSS 3.8) | TOTOLINK outdoor CPE CP450 v4.1.0cu | cvebase.io