CVE-2024-57018 | TOTOLINK X5000R 9.1.0cu.2350_B20230313 setVpnAccountCfg desc os command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK X5000R 9.1.0cu.2350_B20230313. Affected by this issue is the function setVpnAccountCfg. The manipulation of the argument desc leads to os command injection.

This vulnerability is handled as CVE-2024-57018. The attack may be launched remotely. There is no exploit available.