PT-2024-30125
CVE-2024-42748
·
تاريخ النشر
2024-08-12
·
تاريخ التحديث
2024-08-13
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOTOLINK X5000r version 9.1.0cu.2350 b20230313
Description
The file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in the
setWiFiWpsCfg function. Authenticated attackers can send malicious packets to execute arbitrary commands.Recommendations
For TOTOLINK X5000r version 9.1.0cu.2350 b20230313, consider disabling the
setWiFiWpsCfg function in the /cgi-bin/cstecgi.cgi file as a temporary workaround until a patch is available. Restrict access to the /cgi-bin/cstecgi.cgi file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾