CVE-2024-57024
MEDIUM 6.8EPSS 1.5%
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg.
- CVSS v3.1 CNA
- 6.8 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.51% chance of exploitation in the next 30 days, 74th percentile
- Published
- 2025-01-15
- Updated
- 2025-01-21
Proof-of-concept exploits (1)
- tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleC…0★ · 2026-01-08