CVE-2024-0570 - CVE House

Back to Database

Status published Medium CVE-2024-0570

Totolink N350RT Setting cstecgi.cgi access control

6.9 CVSS

Vulnerability Description

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-0570

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Chun-Li Lin
lin7lic (VulDB User)
lin7lic (VulDB User)

References

More from Totolink

View All →

Totolink EX1800T cstecgi.cgi loginAuth buffer overflow

Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection

Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow

Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

Totolink X6000R shadow hard-coded credentials

Affected Vendor

Totolink

View all reports →

Affected Software

N350RT

Vulnerable Versions:

9.3.5u.6265

Timeline

Official Publish: January 16th, 2024

Last Modified: May 9th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation