Lucene search
MitreCVE-2024-42739HistoryAug 13, 2024 - 2:15 p.m.
CVE-2024-42739
2024-08-1314:15:13
CWE-78
CWE-94
mitre
web.nvd.nist.gov
26
totolink x5000r v9.1.0cu.2350_b20230313
os command injection
setaccessdevicecfg
authenticated attackers
malicious packet
arbitrary commands
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
48.3%
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setAccessDeviceCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Affected configurations
Node
totolinkx5000r_firmwareMatch9.1.0u.6369_b20230113
totolinkx5000rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | x5000r_firmware | 9.1.0u.6369_b20230113 | cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6369_b20230113:*:*:*:*:*:*:* |
| totolink | x5000r | - | cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-42739
2024-08-13 00:00:00
vulnrichment
vulnrichment
CVE-2024-42739
2024-08-13 00:00:00
nvd
nvd
CVE-2024-42739
2024-08-13 14:15:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
48.3%
Related for CVE-2024-42739