CVE-2023-31856 (published 2023-05-16T00:00:00)
A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a