CVE-2024-41315 | TOTOLINK A6000R 1.0.1-B20201211.2000 apcli_do_enr_pin_wps ifname command injection

A vulnerability was found in TOTOLINK A6000R 1.0.1-B20201211.2000. It has been classified as critical. This affects the function apcli_do_enr_pin_wps. The manipulation of the argument ifname leads to command injection.

This vulnerability is uniquely identified as CVE-2024-41315. Access to the local network is required for this attack to succeed. There is no exploit available.