Lucene search

K

MitreCVELIST:CVE-2024-42737

HistoryAug 13, 2024 - 12:00 a.m.

CVE-2024-42737

2024-08-1300:00:00

mitre

www.cve.org

4

totolink x5000r

os command injection

delblacklist

authenticated attackers

arbitrary commands

EPSS

0.001

Percentile

48.7%

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands.

References

github.com/HouseFuzz/reports/blob/main/totolink/x5000r/delBlacklist/delBlacklist.md

EPSS

0.001

Percentile

48.7%

Related for CVELIST:CVE-2024-42737

nvd1 vulnrichment1 cve1