5 matches found
CVE-2024-57018
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...
8.8CVSS8AI score0.01604EPSS
SaveExploits1References1
CVE-2024-57018
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg...
8.8CVSS0.01604EPSS
SaveExploits1References2
CVE-2024-57018
TOTOLINK X5000R is affected (firmware V9.1.0cu.2350_B20230313). The OS command injection vulnerability resides in the setVpnAccountCfg function via the desc parameter, caused by insufficient input filtering of command characters. Successful exploitation could enable arbitrary command execution on...
8.8CVSS8AI score0.01604EPSS
SaveExploits1References2Affected Software1
20