Lucene search
PRIOn knowledge basePRION:CVE-2024-0579HistoryJan 16, 2024 - 5:15 p.m.
Command injection
2024-01-1617:15:00
PRIOn knowledge base
www.prio-n.com
5
totolink x2000r
command injection
critical vulnerability
remote attack
vdb-250795
nvd
vendor notification
A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250795. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| x2000r_firmware | eq | 1.0.0-b20221212.1452 |
Related
cvelist
cvelist
CVE-2024-0579 Totolink X2000R formMapDelDevice command injection
2024-01-16 16:31:03
cve
cve
CVE-2024-0579
2024-01-16 17:15:08
nvd
nvd
CVE-2024-0579
2024-01-16 17:15:08