CVE-2024-24327

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 30, 2024
Updated: Feb 1, 2024
CWE ID 78

Summary

CVE-2024-24327 is a command injection vulnerability found in the TOTOLINK A3300R V17.0.0cu.557_B20221024 firmware. This vulnerability can be exploited through the pppoePass parameter in the setIpv6Cfg function. The affected product is the TOTOLINK A3300R with this specific firmware version. The base severity of this vulnerability is rated as CRITICAL, with a CVSS score of 9.8. It has a high impact on integrity and confidentiality and poses a potential danger to organizations as it allows remote attackers to execute arbitrary commands on the affected device without any required privileges or user interaction over the network. No remediation steps or specific potential dangers were mentioned in the provided information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24327 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options