CVE-2024-8869 | TOTOLINK A720R 4.1.5 exportOvpn os command injection

CVE-2024-8869 | TOTOLINK A720R 4.1.5 exportOvpn os command injection

A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-8869. It is possible to launch the attack remotely. There is no exploit available. The vendor was contacted early about this disclosure but did not respond in any way.