Lucene search
K

CVE-2025-2096

🗓️ 07 Mar 2025 22:00:16Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

Critical vulnerability in TOTOLINK EX1800T allows remote command injection via web interface.

Related
Detection
Affected
Refs
Paths
NVD
Node
totolinkex1800t_firmwareMatch9.1.0cu.2112_b20220316
AND
[
  {
    "vendor": "TOTOLINK",
    "product": "EX1800T",
    "versions": [
      {
        "version": "9.1.0cu.2112_B20220316",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
modequery paramcgi-bin/cstecgi.cgiCritical OS command injection via manipulation of CGI parameters in setRebootScheCfg function.CWE-77CWE-78
weekquery paramcgi-bin/cstecgi.cgiCritical OS command injection via manipulation of CGI parameters in setRebootScheCfg function.CWE-77CWE-78
minutequery paramcgi-bin/cstecgi.cgiCritical OS command injection via manipulation of CGI parameters in setRebootScheCfg function.CWE-77CWE-78
recHourquery paramcgi-bin/cstecgi.cgiCritical OS command injection via manipulation of CGI parameters in setRebootScheCfg function.CWE-77CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Apr 2025 15:24Current
7.8High risk
Vulners AI Score7.8
CVSS 3.16.3 - 9.8
CVSS 45.3
CVSS 26.5
CVSS 36.3
EPSS0.03953
SSVC
57