CVE-2024-35397
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
A command injection vulnerability was discovered in the TOTOLINK CP900L device running firmware version v4.1.5cu.798_B20221228, specifically in the NTPSyncWithHost function via the hostTime parameter. This allows an attacker to execute arbitrary commands through a crafted request.
Risk Assessment
The risk involves potential full remote control of the device by an attacker, leading to network compromise, data theft, or use of the device in DDoS attacks.
Recommendation
Immediately update the TOTOLINK CP900L firmware to the latest available version that patches this vulnerability. If no update is available, restrict device access to trusted networks and apply firewall rules to block unauthorized requests.
Other vulnerabilities in TOTOLINK CP900L
See all- CVE-2024-35398Critical
A stack overflow vulnerability was discovered in TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228. The issue occurs in the setMacFilterRules function via the desc parameter.
- CVE-2024-35396Critical
TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228 contains a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, allowing attackers to log in as root.
- CVE-2024-35401Medium
A command injection vulnerability was discovered in TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228 in the UploadFirmwareFile function via the FileName parameter. An attacker can remotely execute arbitrary system commands.
- CVE-2024-35400Medium
A stack overflow vulnerability was discovered in TOTOLINK CP900L firmware version 4.1.5cu.798_B20221228. The issue occurs in the SetPortForwardRules function via the desc parameter.
- CVE-2024-35399High
A stack overflow vulnerability was discovered in the TOTOLINK CP900L router running firmware v4.1.5cu.798_B20221228. The issue occurs in the loginAuth function via the password parameter.
- CVE-2024-35395High
A hardcoded password vulnerability was discovered in TOTOLINK CP900L firmware v4.1.5cu.798_B20221228 in the /etc/shadow.sample file. This allows attackers to log in as root.
Original NVD description (English source)
TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.