CVE-2024-34204 Information

Description

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.

Reference

https://github.com/n0wstr/IOTVuln/tree/main/CP450/setUpgradeFW