CVE-2024-57023

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCfg.

CVSS v3.1 CNA

6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.35% chance of exploitation in the next 30 days, 71st percentile

Published

2025-01-15

Updated

2025-01-21

Proof-of-concept exploits (1)

• tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleC…0★ · 2026-01-08

Security advisories

• https://www.totolink.net

References

• CVE Record
• NVD entry

Related

• CVE-2024-57011
• CVE-2024-57012
• CVE-2024-57013
• CVE-2024-57014
• CVE-2024-57015
• CVE-2024-57016