CVE-2024-57036

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-01-21 · updated 2026-06-17
Weakness: CWE-77

Description

TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request.

Affected products

TOTOLINK A810R Firmware: 4.1.2cu.5032_b20200407

References

https://github.com/luckysmallbird/Totolink-A810R-Vulnerability-1/blob/main/3.md

Get alerted when CVE-2024-57036 or the next vulnerability affects your stack