Back to Database
Status published
Medium
CVE-2024-8077
TOTOLINK AC1200 T8 setTracerouteCfg os command injection
Vulnerability Description
A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8077
Credits & Attribution
No credits recorded in the NVD database.
References
More from TOTOLINK
View All →CVE-2025-9935
TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection
Medium
6.9
CVE-2025-9934
TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection
Medium
5.3
CVE-2025-9783
TOTOLINK A702R formParentControl sub_418030 buffer overflow
High
8.7
CVE-2025-9782
TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow
High
8.7
CVE-2025-9781
TOTOLINK A702R formFilter sub_4162DC buffer overflow
High
8.7
Affected Vendor
TOTOLINK
View all reports →Affected Software
AC1200 T8
Vulnerable Versions:
4.1.5cu.862_B20230228
Timeline
Official Publish:
August 22nd, 2024
Last Modified:
August 22nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L