CVE-2023-37149 Information

Description

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.

Reference

https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/4/README.md