CVE-2024-57018

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...

CVE-2024-57019

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "limit" parameter in setVpnAccountCfg...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "eMinute" parameter in setWiFiScheduleCfg failing to properly filter constructor special characters, commands, etc. The vulnerability can ...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sMinute" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sHour" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability, which stems from the "desc" parameter in setVpnAccountCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabilit...

TOTOLINK X5000R security vulnerabilities

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "switch" parameter in setScheduleCfg to correctly filter for constructor command special...

PT-2025-3379

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability occurs via the switch parameter in the setScheduleCfg function. Recommendations For TOTOLINK X5000R...

PT-2025-3380

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the recHour parameter in the setScheduleCfg function. Recommendations For TOTOLIN...

CVE-2024-57025: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57022: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg...

CVE-2024-57018

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57019

The CVE-2024-57019 entry concerns TOTOLINK X5000R router vulnerable to OS command injection via the limit parameter in setVpnAccountCfg on version 9.1.0cu.2350_B20230313. Technical details from connected sources confirm the flaw stems from improper filtering of characters/commands in the limit pa...

CVE-2024-57024

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , contains an OS command injection vulnerability. The flaw exists within the setWiFiScheduleCfg function located in the web/cgi-bin/cstecgi.cgi script, caused by the failure to neutralize special characters in the eMinute pa...

CVE-2024-57017: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg...

PT-2025-3381

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version V9.1.0cu.2350 B20230313 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the hour parameter in the setScheduleCfg function. Recommendations For TOTOLINK...

CVE-2024-57014

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...

PT-2025-3390 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the desc parameter in the setWiFiScheduleCfg function. Recommendations: For...

PT-2025-3388 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability occurs via the week parameter in the setWiFiScheduleCfg function. Recommendations: For TOTOLINK X500...