CVE-2024-57014
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 15, 2025
Updated: Jan 16, 2025
CWE ID 78
Summary
CVE-2024-57014 is a newly discovered vulnerability affecting TOTOLINK X5000R V9.1.0cu.2350_B20230313. The issue lies in the "recHour" parameter of the setScheduleCfg functionality, which allows an attacker to inject OS commands, potentially leading to unauthorized system access or data theft. Exploitation of this vulnerability may result in significant security implications for affected devices and networks. Users are strongly urged to install the latest security patches and updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.