CVE-2024-57036: Command Injection
TOTOLINK A810R V4.1.2cu.5032B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57036?
CVE-2024-57036 has a severity rating that depends on the potential impact of command injection on the affected system.
How do I fix CVE-2024-57036?
To fix CVE-2024-57036, it is recommended to update to the latest firmware version provided by TOTOLINK that addresses this vulnerability.
What is the nature of the vulnerability in CVE-2024-57036?
CVE-2024-57036 is a command insertion vulnerability that allows attackers to execute arbitrary commands through crafted HTTP requests.
Which devices are affected by CVE-2024-57036?
The vulnerability CVE-2024-57036 specifically affects the TOTOLINK A810R model running the firmware version V4.1.2cu.5032_B20200407.
Can CVE-2024-57036 be exploited remotely?
Yes, CVE-2024-57036 can be exploited remotely by sending specially crafted HTTP requests to the vulnerable device.