CVE-2024-32350: Code Injection
Published May 14, 2024
·Updated
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary.
Affected Software
3 affected components
TOTOLINK X5000R
All of the following
TOTOLINK X5000r Firmware=9.1.0cu.2350_b20230313
TOTOLINK X5000R
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·04:17 PM
Aug 20, 2024
Data Sourced
via MITRE·04:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-32350?
CVE-2024-32350 is classified as a critical vulnerability due to its potential for authenticated remote command execution.
2
How do I fix CVE-2024-32350?
To mitigate CVE-2024-32350, update the TOTOLINK X5000R firmware to the latest version provided by the vendor.
3
What kind of vulnerability is CVE-2024-32350?
CVE-2024-32350 is an authenticated remote command execution vulnerability affecting the 'ipsecPsk' parameter.
4
Which software versions are affected by CVE-2024-32350?
CVE-2024-32350 affects the TOTOLINK X5000R with firmware version V9.1.0cu.2350_B20230313 and possibly earlier versions.
5
Is CVE-2024-32350 exploitable remotely?
Yes, CVE-2024-32350 can be exploited remotely if the attacker has authenticated access to the device.