CVE-2024-36783 | Totolink LR350 9.3.5u.6369_B20220309 NTPSyncWithHost host_time command injection

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. It has been rated as critical. Affected by this issue is the function NTPSyncWithHost. The manipulation of the argument host_time leads to command injection.

This vulnerability is handled as CVE-2024-36783. The attack needs to be approached within the local network. There is no exploit available.