CVE-2024-0298

The CVE-2024-0298 entry describes a command-injection vulnerability in Totolink N200RE (version 9.3.5u.6139_B20201216) affecting the /cgi-bin/cstecgi.cgi endpoint. Input parameter ip in setDiagnosisCfg can be manipulated to execute OS commands, with remote exploitation described as possible. Publ...

CVE-2024-0298 Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injection

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216. It has been classified as critical. Affected is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to launch the attack remotely. The...