Description
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Medium · 6.8
CVE-2024-42740
EUVD-2024-39753GHSA-jcvv-37v4-9r3f
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Auth…
Published Aug 13, 2024 · Updated Aug 13, 2024 · Assigned by mitre