What is CVE-2024-8077?

CVE-2024-8077 is a medium-severity vulnerability in Totolink Ac1200 T8, classified under OS Command Injection. CVSS score: 6.3/10. Published 2024-08-22.

How severe is CVE-2024-8077?

Medium severity. CVSS v3 base score is 6.3 out of 10.

RCE in Totolink Ac1200 T8

CVE-2024-8077

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability class: Command Injection (OS Command Injection)

Published 2024-08-22 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

EPSS exploit prediction

EPSS: 0.029 (86.6th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 87th percentile — 86.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.029 · newest: 0.029 · change: 0.000

Affected products

Totolink Ac1200 T8 — versions 4.1.5cu.862_B20230228
Totolink T8
Totolink T8 Firmware — versions 4.1.5cu.862_b20230228

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

vuldb.com/ (technical-description, Third Party Advisory, vdb-entry)
vuldb.com/ (signature, Permissions Required, permissions-required)
github.com/hawkteam404/RnD_Public/blob/main/TOTOLink_AC1200_T8_OsCmdI_BOF.md (related, Exploit, Third Party Advisory)
www.totolink.net/ (Product, product)

Frequently asked questions

What is CVE-2024-8077?: CVE-2024-8077 is a medium-severity vulnerability in Totolink Ac1200 T8, classified under OS Command Injection. CVSS score: 6.3/10. Published 2024-08-22.
How severe is CVE-2024-8077?: Medium severity. CVSS v3 base score is 6.3 out of 10.