Command Injection Vulnerability in TOTOLINK A6000R Router
CVE-2024-57212

Currently unrated

Key Information:

Vendor

TOTOLINK
Status
A6000r Firmware
Vendor
CVE Published:
10 January 2025

What is CVE-2024-57212?

The TOTOLINK A6000R Router firmware version V1.0.1-B20201211.2000 is susceptible to a command injection vulnerability through the opmode parameter in the action_reboot function. Exploiting this flaw may allow an attacker to execute arbitrary commands on the device, potentially leading to unauthorized access and control over the router. Users are advised to review their firmware versions and take appropriate actions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A60...

Timeline

  • Vulnerability published

JSON
.