5 matches found
CVE-2024-57018
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...
CVE-2024-57018
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...
CVE-2024-57018
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...
CVE-2024-57018
TOTOLINK X5000R is affected (firmware V9.1.0cu.2350_B20230313). The OS command injection vulnerability resides in the setVpnAccountCfg function via the desc parameter, caused by insufficient input filtering of command characters. Successful exploitation could enable arbitrary command execution on...
