CVE-2024-32352

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary...

CVE-2024-32351

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "mru" parameter in the "cstecgi.cgi" binary...

CVE-2024-32352

The CVE-2024-32352 entry concerns TOTOLINK X5000R firmware 9.1.0cu.2350_B20230313. A authenticated remote command execution vulnerability exists in the ipsecL2tpEnable parameter of the cstecgi.cgi binary. Affected component: cstecgi.cgi handling for ipsecL2tpEnable. Impact as described: authentic...

CVE-2024-32350

TOTOLINK X5000R is affected. Version 9.1.0cu.2350_B20230313 contains an authenticated remote command execution (RCE) vulnerability in the cstecgi.cgi binary via the ipsecPsk parameter. Root cause: improper handling/filtering of input leading to arbitrary code execution. Impact: authenticated netw...