CVE-2024-32353

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , is vulnerable to a command injection flaw in the setSSServer function at the /cgi-bin/cstecgi.cgi endpoint. The root cause is a failure to properly sanitize input data for parameters such as password , port , and timeout ,...