إرسال #643048: TOTOLINK X5000R V9.1.0cu.2415_B20250515 Command Injectionالمعلومات

عنوانTOTOLINK X5000R V9.1.0cu.2415_B20250515 Command Injection
الوصفA vulnerability was determined in TOTOLINK X5000R V9.1.0cu.2415_B20250515. This impacts the function sub_410C34 of the file cstecgi.cgi. This manipulation of the argument pid causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
المصدر⚠️ https://github.com/Axelioc/CVE/blob/main/TOTOLINK/X5000R/sub_410C34/sub_410C34.md
المستخدم
 Haaalion (UID 89556)
ارسال28/08/2025 10:14 AM (1 سنة منذ)
الاعتدال03/09/2025 01:33 PM (6 days later)
الحالةتمت الموافقة
إدخال VulDB322336 [TOTOLINK X5000R 9.1.0cu.2415_B20250515 /cgi-bin/cstecgi.cgi sub_410C34 pid تجاوز الصلاحيات]
النقاط18

Do you want to use VulDB in your project?

Use the official API to access entries easily!