CVE-2024-34257

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands…

Critical · published May 8, 2024

CVSS v3.1
9.8
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

🔥 A rogue command is all it takes for an attacker to seize control of your TOTOLINK EX1800T. This vulnerability in the apcliEncrypType parameter lets anyone with malice in mind run arbitrary commands and gain admin privileges! Think of it like giving someone the keys to your home because they handed you a phony ID — once they're inside, they can do just about anything, and you’d never know until it’s too late. An attacker could run wild, changing your settings, intercepting personal data, or even locking you out of your own device entirely. The implications are absolutely devastating, especially if the device is part of your home network!

Put simply

Think of it like giving someone the keys to your home because they handed you a phony ID — once they're inside, they can do just about anything, and you’d never know until it’s too late. This vulnerability allows unauthorized command execution by exploiting the apcliEncrypType parameter, compromising the security of the device and granting admin access to an attacker without proper authorization.

What to do

An attacker could run wild, changing your settings, intercepting personal data, or even locking you out of your own device entirely. The implications are absolutely devastating, especially if the device is part of your home network! Update your TOTOLINK EX1800T to version V9.1.0cu.2112_B20220316 or later immediately to patch this critical flaw. Additionally, review your network security settings and ensure unauthorized users cannot access your devices. You’ve got this! Stay vigilant and secure your network – the internet will thank you! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03817 · 90.0th percentile
Published
2024-05-08T00:00Z
EPSS history
Timeline
  • 08 MAY 00:00Z
    TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands…
    cvelistv5