CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

CVE-2024-57024

creationtimestamp| type| source ---|---|--- 2025-01-15 16:54:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1804 2025-01-15 17:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf535zs2t 2025-01-15 18:24:35+00:00| seen|...

CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

CVE-2024-57024

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , contains an OS command injection vulnerability. The flaw exists within the setWiFiScheduleCfg function located in the web/cgi-bin/cstecgi.cgi script, caused by the failure to neutralize special characters in the eMinute pa...