TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi.

Related CVEs

CVE-2024-32354

Key Information

GHSA ID

GHSA-rw6g-5q22-m8p3

Published

May 14, 2024 6:31 PM

Last Modified

July 3, 2024 6:41 PM

CVSS Score

5.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: June 12, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.