CVE-2024-42737: OS Command Injection
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42737?
CVE-2024-42737 is classified as a critical vulnerability that allows authenticated attackers to perform OS command injection.
How do I fix CVE-2024-42737?
To fix CVE-2024-42737, update the TOTOLINK X5000R firmware to the latest version that addresses this vulnerability.
What is affected by CVE-2024-42737?
CVE-2024-42737 affects TOTOLINK X5000R routers running firmware version 9.1.0cu.2350_b20230313.
What type of attacks can be executed using CVE-2024-42737?
Authenticated attackers can exploit CVE-2024-42737 to send malicious packets and execute arbitrary commands on the system.
Is there a workaround for CVE-2024-42737 until I can update?
Currently, there are no documented workarounds for CVE-2024-42737, and it is highly recommended to update the firmware as soon as possible.