CVE-2024-36783: Command Injection Vulnerability in TOTOLINK LR350. This vulnerability allows for command injection via the host_time parameter in the NTPSyncWithHost function. The TOTOLINK LR350 router, version V9.3.5u.6369_B20220309, is susceptible to this flaw, potentially enabling attackers to execute arbitrary commands on the affected system. With a CVSS score of 9.8, its severity is critical, though SOCRadar's Vulnerability Risk Score (SVRS) is 34. While not immediately critical based on SVRS, the presence of CWE-77 highlights the potential for remote code execution. Successful exploitation could lead to complete system compromise, data theft, or denial of service. Users should apply available patches or mitigations to address this security risk. The TOTOLINK router is affected by this vulnerability.