CVE-2024-53333

Summary

CVE-2024-53333 is a newly identified vulnerability affecting TOTOLINK EX200 v4.0.3c.7646_B20201211. The setUssd function in this device contains a command injection flaw. An attacker can exploit this vulnerability by sending malicious input via the "ussd" parameter, allowing them to execute arbitrary commands on the device. Successful exploitation could result in unauthorized access, data theft, or system compromise. Users are strongly advised to update their devices as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.