Lr1200Gb Firmware CVE-2024-0295

HIGH

OS Command Injection (CWE-78)

2024-01-08 cna@vuldb.com

Command Injection Lr1200Gb Firmware TOTOLINK

7.3

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

3

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

PoC Detected

Nov 21, 2024 - 08:46 vuln.today

Public exploit code

CVE Published

Jan 08, 2024 - 04:15 nvd

HIGH 7.3

DescriptionCVE.org

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249861 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Elevation of privilege in Samsung Galaxy Watch4 via nearby BLE connection. Allows unauthorized access to watch data.

Technical ContextAI

CWE-311.

RemediationAI

Apply Samsung security update.

More in Lr1200Gb Firmware

View all

CVE-2024-1783 CRITICAL Act Now POC

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810.

CVE-2023-46977 CRITICAL Act Now POC

TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the fu

CVE-2025-60687 MEDIUM This Month POC

An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B2023013

CVE-2025-60688 MEDIUM This Month POC

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681

CVE-2025-60684 MEDIUM This Month POC

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681

CVE-2024-0578 CRITICAL Act Now

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Rated critical severit

CVE-2024-0577 CRITICAL Act Now

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Rated critical severity (CVSS 9.8), this vulnerabi

CVE-2024-0576 CRITICAL Act Now

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Rated critical severity (CVSS 9.8), this vulnerabi

CVE-2024-0575 CRITICAL Act Now

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Rated critical severity (CVSS 9.8), this vulnerabi

CVE-2024-0574 CRITICAL Act Now

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Rated critical severity

CVE-2024-0573 CRITICAL Act Now

A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Rated critical sev

CVE-2024-0572 CRITICAL Act Now

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Rated critical

Same weakness CWE-78 – OS Command Injection

View all

CVE-2019-15107 CRITICAL POC

CVE-2024-51378 CRITICAL POC

CVE-2014-6271 CRITICAL POC

CVE-2018-11138 CRITICAL POC

CVE-2014-6278 HIGH POC

CVE-2017-6334 HIGH POC

CVE-2024-50603 CRITICAL POC

CVE-2024-9474 MEDIUM POC

Same technique Command Injection

View all

CVE-2024-21887 CRITICAL POC

CVE-2019-15107 CRITICAL POC

CVE-2024-51378 CRITICAL POC

CVE-2012-1823 CRITICAL POC

CVE-2016-1555 CRITICAL POC

CVE-2014-6271 CRITICAL POC

CVE-2024-55956 CRITICAL POC

CVE-2018-11138 CRITICAL POC

Share

CVE-2024-0295 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy