CVE-2024-57012 - TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg

HIGH

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg

Published Jan 15, 2025

8.8

HIGH

CVSS 3.1

EPSS 1.60%

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53485		Advisory
https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md		ExploitThird Party Advisory
https://www.totolink.net/		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 15, 2025

Updated Mar 14, 2025

Reserved Jan 9, 2025

Updated Jan 16, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 15, 2025

Updated Mar 14, 2025

Exploited since n/a