TOTOLINK X5000R ipsecL2tpEnable Parameter Code Execution Vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A code execution vulnerability exists in the TOTOLINK X5000R ipsecL2tpEnable parameter, which stems from the ipsecL2tpEnable parameter of cstecgi.cgi failing to correctly filter the special elements of the constructed code...

CVE-2024-32352

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , is susceptible to an authenticated remote command execution (RCE) vulnerability. The flaw exists in the cstecgi.cgi binary because the ipsecL2tpEnable parameter fails to correctly filter special elements of the constructed...

CVE-2024-32352: Improper Control of Generation of Code

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary...

CVE-2024-32352

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution RCE vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary...