References https://cvefeed.io/vuln/detail/CVE-2023-24161 https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1555.html https://osv.dev/vulnerability/CVE-2023-24161 https://stack.watch/product/totolink/ca300-poe-firmware/ https://cve.komodosec.com/cve-list?search=&cvss_score_range=7&year=&has_exploit=&results_per_page=15&sort=cvss_score3&order=ascending&page_number=7400 https://cve.circl.lu/vuln/fkie_cve-2023-24161 https://avd.aliyun.com/product?prod=ca300-poe https://cqr.company/web-vulnerabilities/command-injection/
Related VulnerabilitiesPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command Injection9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCCVE-2026-46339: 9Router <= 0.4.36 - Unauthenticated RCEPoCCVE-2026-59801: 9Router - Unauthenticated LLM Provider API ExposurePoC9router-default-login: 9Router - Default Login9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)9router /api/tunnel/tailscale-install 命令执行漏洞PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information LeakPoCBLINK Routers /goform/set_cmd 命令执行漏洞(CVE-2025-1609)TOTOLINK EX200 /cgi-bin/cstecgi.cgi setLanguageCfg 命令执行漏洞TOTOLINK EX200 /cgi-bin/cstecgi.cgi NTPSyncWithHost 命令执行漏洞BLINK routers /goform/set_hidessid_cfg 命令执行漏洞(CVE-2025-45985)