CVE-2024-34204 | Totolink CP450 4.1.0cu.747_B20191224 setUpgradeFW FileName command injection

A vulnerability, which was classified as critical, has been found in Totolink CP450 4.1.0cu.747_B20191224. Affected by this issue is the function setUpgradeFW. The manipulation of the argument FileName leads to command injection.

This vulnerability is handled as CVE-2024-34204. Access to the local network is required for this attack to succeed. There is no exploit available.