Remote Denial of Service Vulnerability in TOTOLINK X5000R
CVE-2024-25468

7.5HIGH

Key Information:

Vendor

TOTOLINK
Status
X5000r Firmware
Vendor
CVE Published:
17 February 2024

What is CVE-2024-25468?

A vulnerability exists in the TOTOLINK X5000R version V.9.1.0u.6369_B20230113, where a remote attacker can exploit the host_time parameter within the NTPSyncWithHost component. This allows unauthorized users to cause a denial of service, ultimately disrupting the system's operations. Proper measures should be taken to mitigate this vulnerability to ensure system integrity and availability.

References

https://github.com/thKim0/totolink

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.