CVE-2024-32353 | Totolink X5000R 9.1.0cu.2350_B20230313 /cgi-bin/cstecgi.cgi setSSServer port command injection

A vulnerability was found in Totolink X5000R 9.1.0cu.2350_B20230313. It has been classified as critical. Affected is the function setSSServer of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument port leads to command injection.

This vulnerability is traded as CVE-2024-32353. The attack needs to be done within the local network. There is no exploit available.