Recent Vulnerabilities Product List Research Posts Trends Blog Docs About Contact

Published: 19/09/2024 Updated: 24/09/2024

Critical Remote Command Injection in TOTOLINK T10 Router

An important vulnerability is in TOTOLINK T10 4.1.8cu.5207. This issue is critical. It impacts the setTracerouteCfg function in the /cgi-bin/cstecgi.cgi file. The problem is with the command argument, which leads to OS command injection. An attacker can use this remotely. The exploit is public and can be used by anyone. The vendor was informed early but did not respond.

Vulnerable Product	Search on Vulmon	Subscribe to Product
totolink t10 firmware 4.1.8cu.5207

CWE-78 CWE-78 https://nvd.nist.gov https://www.first.org/epss https://github.com/C9Y57/TOTOLINK_setTracerouteCfg/blob/main/setTracerouteCfg.md https://vuldb.com/?ctiid.278152 https://vuldb.com/?id.278152 https://vuldb.com/?submit.406140 https://www.totolink.net/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-9001

Vulnerability Summary

References

Vulmon Search

About

Products

Connect