EUVD-2024-30173

Malicious code in bioql PyPI...

EUVD-2024-30171

Malicious code in bioql PyPI...

The vulnerability of the setSSServer() function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setSSServer function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the lack of measures to sanitize input data when processing parameters such as password, port, and timeout. Exploiting this vulnerability allows a remote...

The vulnerability of the setSSServer() function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setSSServer function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the lack of measures to sanitize input data when processing parameters such as password, port, and timeout. Exploiting this vulnerability allows a remote...

The vulnerability of the setSSServer() function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setSSServer function in the cstecgi.cgi script of the TOTOLINK X5000R router’s software is related to the lack of measures to sanitize input data when processing parameters such as password, port, and timeout. Exploiting this vulnerability could allow an attacker to execu...

CVE-2024-32354

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2024-32355

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2024-32355

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-32355

The TOTOLINK X5000R router, specifically version 9.1.0cu.2350_B20230313 , is vulnerable to a command injection vulnerability (CWE-77) within the setSSServer function of the cstecgi.cgi script. The root cause is the lack of proper input sanitization for parameters such as password, port, and timeo...

CVE-2024-32354

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , contains a command injection vulnerability (CWE-77) within the setSSServer function located at the /cgi-bin/cstecgi.cgi endpoint. The root cause is a failure to properly sanitize and filter input data, specifically within ...

CVE-2024-32353

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , is vulnerable to a command injection flaw in the setSSServer function at the /cgi-bin/cstecgi.cgi endpoint. The root cause is a failure to properly sanitize input data for parameters such as password , port , and timeout ,...

CVE-2024-32355: Improper Neutralization of Special Elements used in a Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-32354: Improper Neutralization of Special Elements used in a Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2024-32353: Improper Neutralization of Special Elements used in a Command

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

PT-2024-24531 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found in the setSSServer function via the timeout parameter at the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version...

PT-2024-24532 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found, related to the setSSServer function, specifically via the password parameter. Recommendations: For TOTOLINK X5000R version 9.1.0cu.2350 B20230313...

PT-2024-24530 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found via the port parameter in the setSSServer function at "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version 9.1.0cu.23...