CVE-2023-48800

published 2023-12-04

CVE-2023-48800: In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	x6000r_firmware	—	—

CWE-78