CVE-2024-34206

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:cp450_firmware:4.1.0cu.747_b20191224:*:*:*:*:*:*:*
cpe:2.3:h:totolink:cp450:-:*:*:*:*:*:*:*

History

09 Apr 2025, 14:19

Type Values Removed Values Added
CPE cpe:2.3:o:totolink:cp450_firmware:4.1.0cu.747_b20191224:*:*:*:*:*:*:*
cpe:2.3:h:totolink:cp450:-:*:*:*:*:*:*:*
First Time Totolink cp450
Totolink cp450 Firmware
Totolink
References () https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx - () https://github.com/n0wstr/IOTVuln/tree/main/CP450/setWebWlanIdx - Exploit, Third Party Advisory

14 May 2024, 16:12

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 15:38

Updated : 2025-04-09 14:19


NVD link : CVE-2024-34206

Mitre link : CVE-2024-34206


JSON object : View

Products Affected

totolink

  • cp450_firmware
  • cp450
CWE

No CWE.