CVE-2024-42737

creationtimestamp| type| source ---|---|--- 2024-08-13 17:07:04+00:00| seen| https://t.me/cvedetector/3021...

CVE-2024-42737

The CVE-2024-42737 vulnerability affects TOTOLINK X5000r (version 9.1.0cu.2350_b20230313) where the CGI endpoint /cgi-bin/cstecgi.cgi contains an OS command injection in the delBlacklist function. An attacker can send a malicious packet to execute arbitrary commands on the affected device. The is...