Lucene search
HistoryJan 25, 2024 - 4:15 p.m.
CVE-2024-22529
totolink
x2000r_v2
v2.0.0-b20230727.10434
command injection
vulnerability
/bin/boa
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.054 Low
EPSS
Percentile
93.2%
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.
Affected configurations
Node
totolinkx2000r_firmwareMatch2.0.0-b20230727.10434
totolinkx2000rMatchv2
| CPE | Name | Operator | Version |
|---|---|---|---|
| totolink:x2000r_firmware | totolink x2000r firmware | eq | 2.0.0-b20230727.10434 |
Related
nvd
nvd
CVE-2024-22529
2024-01-25 16:15:08
cvelist
cvelist
CVE-2024-22529
2024-01-25 00:00:00
prion
prion
Command injection
2024-01-25 16:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.054 Low
EPSS
Percentile
93.2%
Related for CVE-2024-22529