PT-2025-3379

CVE-2024-57013

·

Published

2025-01-15

·

Updated

2025-03-10

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2350 B20230313
Description The issue is related to an OS command injection vulnerability. This vulnerability occurs via the switch parameter in the setScheduleCfg function.
Recommendations For TOTOLINK X5000R version 9.1.0.2350 B20230313, consider disabling the setScheduleCfg function until a patch is available to prevent exploitation of the OS command injection vulnerability via the switch parameter.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2024-57013
BDU:2025-05036
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com