CVE-2024-1781

Summary

CVE-2024-1781 is a critical vulnerability affecting the function setWizardCfg in the file /cgi-bin/cstecgi.cgi of Totolink X6000R AX3000's component shttpd. The issue results in command injection, allowing unauthorized users to execute malicious commands on the affected system. This vulnerability, identified as VDB-254573, has been disclosed to the public, making it exploitable. Despite early contact, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.