Security Advisory
CVE-2018-13307
9.8
CRITICAL
Vulnerability Description
System command injection in fromNtp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ntpServerIp2" POST parameter. Certain payloads cause the device to become permanently inoperable.
Published Date
November 27, 2018
Official Source
NIST NVD Advisory