CVE-2024-32355 | Totolink X5000R 9.1.0cu.2350_B20230313 setSSServer password command injection

A vulnerability was found in Totolink X5000R 9.1.0cu.2350_B20230313. It has been rated as critical. Affected by this issue is the function setSSServer. The manipulation of the argument password leads to command injection.

This vulnerability is handled as CVE-2024-32355. Access to the local network is required for this attack. There is no exploit available.