CVE-2023-48802

published 2023-11-30

CVE-2023-48802: In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	x6000r_firmware	—	—

CWE-78