PoC Index

CVE-2024-57023

MEDIUM 6.8EPSS 1.4%

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCfg.

CVSS v3.1
6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
1.35% chance of exploitation in the next 30 days, 70th percentile
Published
2025-01-15
Updated
2025-01-21

Proof-of-concept exploits (1)

References

Related