Cyber Resilience

CVE-2024-32349

MediumPublic PoC

Published: 14 May 2024

Published
14 May 2024
Modified
04 April 2025
KEV Added
—
Patch
—
CVSS Score v3.1 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score 0.0097 77.0th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-32349 is a medium-severity Command Injection (CWE-77) vulnerability in Totolink X5000R Firmware. Its CVSS base score is 6.0 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation of Remote Services (T1210); ranked in the top 23.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary.

CWE(s)
CWE-77

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
attack.mitre.org →
Why these techniques?

The authenticated RCE vulnerability via the 'mtu' parameter in cstecgi.cgi enables exploitation of remote services on the router to execute arbitrary commands.

Affected Assets

totolink
x5000r firmware
9.1.0cu.2350_b20230313

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References