4 matches found
CVE-2024-34921
TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...
8.8CVSS5.8AI score0.09178EPSS
SaveExploits1References1
CVE-2024-34921
The CVE-2024-34921 entry applies to TOTOLINK X5000R firmware version 9.1.0cu.2350_B20230313, where a command injection is possible via the disconnectVPN function. Connected sources attribute the root cause to inadequate input sanitization (notably in the pid parameter of /cgi-bin/cstecgi.cgi), en...
8.8CVSS7.9AI score0.09178EPSS
SaveExploits1References1Affected Software1
20