CVE-2024-57021

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg...

PT-2025-3390 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the desc parameter in the setWiFiScheduleCfg function. Recommendations: For...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57020

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg...

CVE-2024-57013

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg...

CVE-2024-57012

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sMinute" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "eHour" parameter in setWiFiScheduleCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabili...

PT-2025-3387 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: The issue is related to an OS command injection vulnerability. This vulnerability can be exploited through the sHour parameter in the setWiFiScheduleCfg function. Recommendations: Fo...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "limit" parameter in setVpnAccountCfg failing to correctly filter constructor special characters, commands,...

CVE-2024-57018

TOTOLINK X5000R is affected (firmware V9.1.0cu.2350_B20230313). The OS command injection vulnerability resides in the setVpnAccountCfg function via the desc parameter, caused by insufficient input filtering of command characters. Successful exploitation could enable arbitrary command execution on...

CVE-2024-57018

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability, which stems from the "desc" parameter in setVpnAccountCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabilit...

CVE-2024-57015

TOTOLINK X5000R is affected by CVE-2024-57015. The vulnerability is an OS command injection via the hour parameter in setScheduleCfg on version V9.1.0cu.2350_B20230313, caused by inadequate filtering of constructed command characters. Impact is described as arbitrary command execution with high s...

CVE-2024-57017

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg...

CVE-2024-57020

TOTOLINK X5000R firmware V9.1.0cu.2350_B20230313 contains an OS command injection in setWiFiScheduleCfg via the sMinute parameter. The vulnerability could allow an attacker with network access (no user interaction) and low privileges to execute arbitrary commands with high confidentiality, integr...

CVE-2024-57016

CVE-2024-57016 affects TOTOLINK X5000R, specifically the function setVpnAccountCfg; the vulnerability arises from the user parameter not being properly sanitized in the /web/cgi-bin/cstecgi.cgi endpoint, enabling an OS command injection. Reported details from PT-2025-3382 describe that this could...

CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "pass" parameter in setVpnAccountCfg failing to correctly filter constructor special characters, commands,...

CVE-2024-57021

CVE-2024-57021 affects TOTOLINK X5000R, firmware version V9.1.0cu.2350_B20230313. The vulnerability is an OS command injection in the router’s setWiFiScheduleCfg function, caused by inadequate filtering of the eHour parameter. Impact is arbitrary command execution with high severity (per linked C...