CVE-2024-57214

MEDIUM

TOTOLINK A6000R V1.0.1-B20201211.2000 - OS Command Injection via devname Parameter in reset_wifi Function

Title source: llm

Description

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://github.com/yanggao017/vuln/tree/main/TOTOLINK/A6000R/CI_8_reset_wifi

Scores

CVSS v3 6.3

EPSS 0.0117

EPSS Percentile 78.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-77

Status published

Products (1)

totolink/a6000r_firmware 1.0.1-b20201211.2000

Published Jan 10, 2025

Tracked Since Feb 18, 2026