CVE-2024-34218 | Totolink CP450 4.1.0cu.747_B20191224 Request NTPSyncWithHost hostTime command injection

A vulnerability classified as critical has been found in Totolink CP450 4.1.0cu.747_B20191224. This affects the function NTPSyncWithHost of the component Request Handler. The manipulation of the argument hostTime leads to command injection.

This vulnerability is uniquely identified as CVE-2024-34218. The attack needs to be initiated within the local network. There is no exploit available.