CVE-2024-23060 | Totolink A3300R 17.0.0cu.557_B20221024 setDmzCfg ip command injection

A vulnerability, which was classified as critical, was found in Totolink A3300R 17.0.0cu.557_B20221024. Affected is the function setDmzCfg. The manipulation of the argument ip leads to command injection.

This vulnerability is traded as CVE-2024-23060. The attack needs to be initiated within the local network. There is no exploit available.