New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-24326

ExploitedNVDCIRCLENISA

EUVD-2024-21748 · Published Jan 30, 2024

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setStaticDhcpRules function.

Technologies

Totolink A3300R FirmwareTotolink A3300R

Weaknesses

CWE-78

CVSS scores

  • v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot