← Back to browse · API

CVE-2024-42737

Severity
CRITICAL
CVSS
9.8
EPSS
0.01677
Risk score
39.79
CISA KEV
No
PoC
No
Published
2024-08-13
Modified
2024-08-13
First seen
2026-08-07
Aliases
EUVD-2024-39750, GHSA-MJH6-RPQH-WMW5
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-39750

Description

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in delBlacklist. Authenticated Attackers can send malicious packet to execute arbitrary commands.

References