CVE-2024-57012
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 15, 2025
Updated: Jan 16, 2025
CWE ID 78
Summary
CVE-2024-57012 is a newly discovered vulnerability affecting the TOTOLINK X5000R V9.1.0cu.2350_B20230313 firmware. The issue involves an OS command injection vulnerability, which can be exploited through the "week" parameter in the setScheduleCfg function. An attacker who successfully exploits this vulnerability could gain unauthorized control over the affected device, potentially leading to serious security consequences. It is strongly recommended that users update their firmware to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.