← Database

CVE-2024-41318

CRITICAL CVSS: 9.8 Published: 2024-07-22 Modified: 2026-06-17

Description

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.

Affected Platforms

Totolink A6000RTotolink A6000R Firmware

Weakness Type

CWE-77

References