Security Advisory

CVE-2023-24153

9.8
CRITICAL

Vulnerability Description

A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published Date February 3, 2023
Official Source NIST NVD Advisory