Description
TOTOLINK CA300-PoE中存在命令注入漏洞，此漏洞是由于未充分验证用户输入的参数NetDiagPingTimeOut的值所导致的。
TOTOLINK CA300-PoE CVE-2023-24141 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-24141
https://avd.aliyun.com/detail?id=AVD-2023-24141
https://cve.imfht.com/detail/CVE-2023-24141
https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingTimeOut/setNetworkDiag_NetDiagPingTimeOut.md
https://zone.ci/aliyun/ali_nvd/40285.html
https://osv.dev/vulnerability/CVE-2023-24141
https://stack.watch/product/totolink/ca300-poe-firmware/
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1555.html
https://cve.komodosec.com/cve-list?search=2023&year=&has_exploit=&results_per_page=15&sort=publish_date&order=descending&page_number=2080