Remote Code Execution Vulnerability in TOTOLINK Networking Products
CVE-2024-51228

Currently unrated

Key Information:

Vendor: TOTOLINK
Status: TOTOLINK CX Series Routers
Vendor: CVE Published:; 27 November 2024

What is CVE-2024-51228?

An issue in certain TOTOLINK networking products enables remote attackers to execute arbitrary code through the /boafrm/formSysCmd component. This vulnerability affects multiple versions of the CX series routers and can lead to serious security breaches if exploited, allowing unauthorized access and control over the affected devices.

References

https://www.totolink.tw/products_view/N302RE

https://www.totolink.tw/products_view/N300RT

https://totolink.tw/support_view/A3002RU

EPSS Score

66% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 27, 2024