Syntax: kev:true severity:critical epss:>0.95 vendor:cisco patch:false
Filters
Severity
Exploitation
Data Source
Data Quality
Vendor
CWE — Weakness Type
Clear all
Top 20 matches Showing top matches — use filters or a more specific query to narrow
1 CRITICAL14 HIGH5 MEDIUM
CVE-2024-57013
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57015
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57011
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57014
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57012
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57022
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57025
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57023
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57021
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.014
CVE-2024-57024
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.014
CVE-2024-57020
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.014
CVE-2024-57016
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "user" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57018
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57017
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57019
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "limit" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.013
CVE-2025-52284
MEDIUM CVSS 6.5
Find Similar
Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to e
totolink
NVD RRF 0.013
CVE-2024-42747
HIGH CVSS 8.8
Find Similar
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWanIeCfg. Authenticated Attackers can send malicious packet to execute ar
totolink
NVD RRF 0.013
CVE-2024-42748
HIGH CVSS 8.8
Find Similar
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg. Authenticated Attackers can send malicious packet to execute
totolink
NVD RRF 0.013
CVE-2024-42740
MEDIUM CVSS 6.8
Find Similar
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Authenticated Attackers can send malicious packet to execute arbi
totolink
NVD RRF 0.013
CVE-2025-61045
CRITICAL CVSS 9.8
Find Similar
TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.
totolink
NVD RRF 0.013
Page 1+ Next →