9May
CVE-2024-34204 | Totolink CP450 4.1.0cu.747_B20191224 setUpgradeFW FileName command injection
A vulnerability, which was classified as critical, has been found in Totolink CP450 4.1.0cu.747_B20191224. Affected by this issue is the functionsetUpgradeFW
. The manipulation of the argument FileName leads to command injection.
This vulnerability is handled as CVE-2024-34204. Access to the local network is required for this attack to succeed. There is no exploit available.