CVE-2024-42737

Summary

CVE-2024-42737 is a newly disclosed vulnerability affecting the TOTOLINK X5000r v9.1.0cu.2350_b20230313 router. The issue lies in the /cgi-bin/cstecgi.cgi file, which contains a command injection flaw in the delBlacklist function. Authenticated attackers can exploit this vulnerability by sending malicious packets, enabling them to execute arbitrary OS commands. This vulnerability poses a significant security risk, especially for organizations and individuals relying on the affected router for critical network functions. It is recommended to apply the latest security patches and updates to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.