CVE-2024-0579

Summary

CVE-2024-0579 is a critical vulnerability affecting the Totolink X2000R 1.0.0-B20221212.1452 firmware. The issue lies in the formMapDelDevice function of the /boafrm/formMapDelDevice file. An attacker can exploit this vulnerability by manipulating the macstr argument to inject commands, which can be executed remotely. The exploit for this vulnerability (VDB-250795) has been made public, increasing the risk of potential attacks. Despite early notification, the vendor has not responded to disclose a patch or mitigation strategy.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.