CVE-2024-42747: OS Command Injection
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWanIeCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42747?
CVE-2024-42747 is classified as a high-severity vulnerability due to its potential to allow authenticated attackers to execute arbitrary OS commands.
How do I fix CVE-2024-42747?
To mitigate CVE-2024-42747, update to the latest TOTOLINK X5000R firmware that addresses this vulnerability.
What specific component is affected by CVE-2024-42747?
CVE-2024-42747 affects the /cgi-bin/cstecgi.cgi file in TOTOLINK X5000R devices.
Who can exploit the vulnerability described in CVE-2024-42747?
Authenticated attackers with access to the affected device configuration can exploit CVE-2024-42747.
What action does the CVE-2024-42747 vulnerability allow?
CVE-2024-42747 allows attackers to send malicious packets to execute arbitrary commands on the affected device.