CVE-2024-32352: Code Injection
Published May 14, 2024
·Updated
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary.
Affected Software
3 affected components
TOTOLINK X5000R
All of the following
TOTOLINK X5000r Firmware=9.1.0cu.2350_b20230313
TOTOLINK X5000R
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·04:17 PM
Aug 2, 2024
Data Sourced
via MITRE·02:13 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-32352?
CVE-2024-32352 is identified as a high-severity vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2024-32352?
To mitigate CVE-2024-32352, update your TOTOLINK X5000R device to the latest firmware version provided by the manufacturer.
3
What type of vulnerability is CVE-2024-32352?
CVE-2024-32352 is classified as an authenticated remote command execution (RCE) vulnerability.
4
What is affected by CVE-2024-32352?
CVE-2024-32352 affects the TOTOLINK X5000R firmware version V9.1.0cu.2350_B20230313.
5
What can attackers do with CVE-2024-32352?
Attackers exploiting CVE-2024-32352 can execute arbitrary commands on the affected device remotely.