CVE-2024-7175

Summary

CVE-2024-7175 is a critical vulnerability found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. The vulnerability resides in the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi and is classified as an OS command injection. It can be exploited remotely by manipulating the argument ipDoamin. The vulnerability has been disclosed publicly and may be actively used since the vendor did not respond to the disclosure. The vulnerability has a base severity of MEDIUM and a CVSS score of 6.3, with low impact on confidentiality and integrity. Remediation measures are not provided in the available information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.