CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57025

creationtimestamp| type| source ---|---|--- 2025-01-15 16:54:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1800 2025-01-15 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf7lymv2j 2025-01-15 18:24:35+00:00| seen|...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

CVE-2024-57025

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , is vulnerable to an OS command injection vulnerability within the setWiFiScheduleCfg() function of the web/cgi-bin/cstecgi.cgi script. The root cause is the failure to properly filter or neutralize special characters used ...