A vulnerability classified as critical has been found in TOTOLINK X5000R 9.1.0cu.2350_B20230313. Affected is the function
setVpnAccountCfg. The manipulation of the argument limit leads to os command injection.
This vulnerability is traded as CVE-2024-57019. It is possible to launch the attack remotely. There is no exploit available.
