CVE-2024-34921

TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...

CVE-2024-34921

TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...

CVE-2024-34921

TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...

CVE-2024-34921

The TOTOLINK X5000R router (version v9.1.0cu.2350_B20230313 ) is vulnerable to a command injection flaw. This issue stems from the disconnectVPN function and the pid parameter within /cgi-bin/cstecgi.cgi , which fails to properly filter special characters and commands. A remote attacker could exp...