CVE-2023-24139 | TOTOLINK CA300-PoE 6.2c.884 setNetworkDiag NetDiagHost command injection (EUVD-2023-28202)
A vulnerability identified as critical has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setNetworkDiag. Performing manipulation of the argument NetDiagHost results in command injection.
This vulnerability is identified as CVE-2023-24139. The attack can only be performed from the local network. There is not any exploit available.