{ "id": "CVE-2024-36783", "sourceIdentifier": "cve@mitre.org", "published": "2024-06-03T20:15:09.370", "lastModified": "2024-06-04T16:57:41.057", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function." }, { "lang": "es", "value": "Se descubri\u00f3 que TOTOLINK LR350 V9.3.5u.6369_B20220309 contiene una inyecci\u00f3n de comando a trav\u00e9s del par\u00e1metro host_time en la funci\u00f3n NTPSyncWithHost." } ], "metrics": {}, "references": [ { "url": "https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20LR350/NTPSyncWithHost/README.md", "source": "cve@mitre.org" } ] }