9974 matches found
CVE-2024-57014
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...
PT-2025-3390 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the desc parameter in the setWiFiScheduleCfg function. Recommendations: For...
CVE-2024-57012
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg...
CVE-2024-57015
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg...
CVE-2024-57025
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...
CVE-2024-57011
CVE-2024-57011 affects the TOTOLINK X5000R router (firmware v9.1.0cu.2350_B20230313). The vulnerability is an OS command injection in the minute parameter of the setScheduleCfg function, allowing an attacker to execute arbitrary commands on the device. Connected documents consistently describe th...
CVE-2024-57018
TOTOLINK X5000R is affected (firmware V9.1.0cu.2350_B20230313). The OS command injection vulnerability resides in the setVpnAccountCfg function via the desc parameter, caused by insufficient input filtering of command characters. Successful exploitation could enable arbitrary command execution on...
CVE-2024-57014
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...
CVE-2024-57021
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg...
CVE-2024-57021
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg...
CVE-2024-57025
TOTOLINK X5000R (version 9.1.0cu.2350_B20230313) is affected by an OS command injection in the setWiFiScheduleCfg function, exploitable via the desc parameter. The issue stems from inadequate validation of command-related input, enabling arbitrary command execution. Several connected sources corr...
CVE-2024-57017
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg...
CVE-2024-57024
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...
CVE-2024-57020
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg...
CVE-2024-57011
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg...
CVE-2024-57016
CVE-2024-57016 affects TOTOLINK X5000R, specifically the function setVpnAccountCfg; the vulnerability arises from the user parameter not being properly sanitized in the /web/cgi-bin/cstecgi.cgi endpoint, enabling an OS command injection. Reported details from PT-2025-3382 describe that this could...
CVE-2024-57020
TOTOLINK X5000R firmware V9.1.0cu.2350_B20230313 contains an OS command injection in setWiFiScheduleCfg via the sMinute parameter. The vulnerability could allow an attacker with network access (no user interaction) and low privileges to execute arbitrary commands with high confidentiality, integr...
CVE-2024-57019
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "limit" parameter in setVpnAccountCfg...