CVE-2024-0293

Summary

CVE-2024-0293 is a critical vulnerability identified in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue impacts the setUploadSetting function in the /cgi-bin/cstecgi.cgi file. Maliciously crafted FileName arguments can lead to os command injection, enabling remote attackers to execute arbitrary commands on affected systems. The exploit for this vulnerability, identified as VDB-249859, has been disclosed publicly and may be actively exploited. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.