CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

CVE-2024-57024

creationtimestamp| type| source ---|---|--- 2025-01-15 16:54:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1804 2025-01-15 17:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf535zs2t 2025-01-15 18:24:35+00:00| seen|...

CVE-2024-57024

TOTOLINK X5000R (firmware V9.1.0cu.2350_B20230313) contains an OS command injection vulnerability in the setWiFiScheduleCfg function, exploitable via the eMinute parameter. The underlying issue is improper input filtering/escaping for commands, enabling arbitrary command execution on the device. ...

CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...