CVE-2024-57024

The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , contains an OS command injection vulnerability. The flaw exists within the setWiFiScheduleCfg function located in the web/cgi-bin/cstecgi.cgi script, caused by the failure to neutralize special characters in the eMinute pa...