Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TOTOLINK CPE CP450 安全漏洞
Vulnerability Description
TOTOLINK CPE CP450是中国吉翁电子(TOTOLINK)公司的一款户外无线客户终端设备,主要用于提供无线宽带接入服务,尤其适用于农村或偏远地区的无线网络覆盖。 TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 版本存在安全漏洞,该漏洞源于 NTPSyncWithHost 方法的 hostTime 参数存在命令注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A