HIGH

CVE-2024-34921

CVSS v3

8.8

HIGH

EPSS Score

12.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.

Technical details

CVSS v3 Vector
3.1
Published
5/14/2024
Last Modified
4/4/2025

Frequently asked questions

What is CVE-2024-34921?

TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.

Is CVE-2024-34921 actively exploited?

Active exploitation of CVE-2024-34921 has not been confirmed. The EPSS score is 12.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-34921?

CVE-2024-34921 has a CVSS v3 base score of 8.8 (HIGH severity), with vector string 3.1.

Is CVE-2024-34921 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2024 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database