CVE-2024-2353

creationtimestamp| type| source ---|---|--- 2024-03-10 09:26:23+00:00| seen| https://t.me/ctinow/204160 2024-03-10 09:26:24+00:00| seen| https://t.me/ctinow/204161 2025-02-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-12 2025-02-12 09:28:20+00:00| seen|...

CVE-2024-2353

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.85220230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be...

CVE-2024-2353 Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.85220230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be...

CVE-2024-2353

CVE-2024-2353 affects Totolink X6000R (version 9.4.0cu.852_20230719) and targets the shttpd component’s file /cgi-bin/cstecgi.cgi, specifically the setDiagnosisCfg function. The vulnerability arises from manipulating the ip parameter, leading to an OS command injection and remote exploitation. Pu...