CVE-2023-48859

published 2023-12-06

CVE-2023-48859: TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3002ru_firmware	—	—

CWE-863