CVE-2024-51228

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote attacker to execute arbitrary code via the /boafrm/formSysCmd component.

CVSS v3.1

6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

3.79% chance of exploitation in the next 30 days, 89th percentile

Nuclei

medium · CWE-78

Published

2024-11-27

Updated

2024-11-29

Proof-of-concept exploits (1)

• tequilasunsh1ne/CVE_2024_512280★ · 2024-12-23

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51228.yaml

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-51228.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-7309
• CVE-2024-22024
• CVE-2024-27292
• CVE-2024-39943
• CVE-2024-4879
• CVE-2024-8190