CVE-2024-34218

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:totolink:cp450_firmware:4.1.0cu.747_b20191224:*:*:*:*:*:*:*
cpe:2.3:h:totolink:cp450:-:*:*:*:*:*:*:*

History

04 Apr 2025, 14:47

Type Values Removed Values Added
CPE cpe:2.3:o:totolink:cp450_firmware:4.1.0cu.747_b20191224:*:*:*:*:*:*:*
cpe:2.3:h:totolink:cp450:-:*:*:*:*:*:*:*
References () https://github.com/n0wstr/IOTVuln/tree/main/CP450/NTPSyncWithHost - () https://github.com/n0wstr/IOTVuln/tree/main/CP450/NTPSyncWithHost - Exploit, Third Party Advisory
First Time Totolink cp450
Totolink cp450 Firmware
Totolink

14 May 2024, 16:12

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 15:38

Updated : 2025-04-04 14:47


NVD link : CVE-2024-34218

Mitre link : CVE-2024-34218


JSON object : View

Products Affected

totolink

  • cp450_firmware
  • cp450
CWE

No CWE.