Description
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands.
High · 8.8
CVE-2024-42744
EUVD-2024-39757GHSA-w8q7-xr64-p378
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUse…
Published Aug 12, 2024 · Updated Aug 15, 2024 · Assigned by mitre