CVE-2024-37626: Command Injection
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37626?
CVE-2024-37626 is considered a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2024-37626?
To fix CVE-2024-37626, update the TOTOLINK A6000R firmware to the latest available version provided by the manufacturer.
Who is affected by CVE-2024-37626?
CVE-2024-37626 affects users of the TOTOLINK A6000R router running firmware version V1.0.1-B20201211.2000.
What kind of attacks can exploit CVE-2024-37626?
CVE-2024-37626 can be exploited through command injection attacks, allowing unauthorized users to execute arbitrary code on the affected device.
Is there a workaround for CVE-2024-37626?
Currently, the best workaround for CVE-2024-37626 is to disable remote management features on the affected device until a firmware update is applied.