Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-10654 PoC — TOTOLINK LR350 formLoginAuth.htm authorization

Source
https://github.com/c0nyy/IoT_vuln
Associated Vulnerability
Title:TOTOLINK LR350 formLoginAuth.htm authorization (CVE-2024-10654)
Description:A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.3.5u.6698_B20230810 is able to address this issue. It is recommended to upgrade the affected component.
Description
POC CVE-2024-10654
Readme
**POC for IoT devices:**
- TOTOLINK LR350: CVE-2024-10654 (login bypass)
File Snapshot

 [4.0K]  /data/pocs/fa78f42a7c374bd10eb442972d42dfb44223f1e4
├── [  73]  README.md
└── [ 630]  TOTOLINK LR350 Vuln.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →