Totolink

X6000r Firmware

52 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-52039

Exploit
  • EPSS 0.12%
  • Published 24.01.2024 18:15:08
  • Last modified 30.05.2025 15:15:26

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function.

9.8

CVE-2023-52038

Exploit
  • EPSS 0.12%
  • Published 24.01.2024 18:15:08
  • Last modified 30.05.2025 15:15:26

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.

9.8

CVE-2023-52042

Exploit
  • EPSS 0.28%
  • Published 16.01.2024 22:15:37
  • Last modified 21.11.2024 08:39:03

An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.

9.8

CVE-2023-52041

Exploit
  • EPSS 0.26%
  • Published 16.01.2024 19:15:08
  • Last modified 17.06.2025 14:15:28

An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.

9.8

CVE-2023-50651

Exploit
  • EPSS 5.42%
  • Published 30.12.2023 17:15:08
  • Last modified 17.04.2025 20:15:25

TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.

9.8

CVE-2023-48800

Exploit
  • EPSS 0.71%
  • Published 04.12.2023 13:15:07
  • Last modified 21.11.2024 08:32:28

In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulne...

9.8

CVE-2023-48799

Exploit
  • EPSS 0.72%
  • Published 04.12.2023 13:15:07
  • Last modified 21.11.2024 08:32:27

TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.

9.8

CVE-2023-48801

Exploit
  • EPSS 0.27%
  • Published 01.12.2023 23:15:07
  • Last modified 21.11.2024 08:32:28

In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulne...

9.8

CVE-2023-43455

Exploit
  • EPSS 3.93%
  • Published 01.12.2023 02:15:07
  • Last modified 21.11.2024 08:24:06

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.

9.8

CVE-2023-43454

Exploit
  • EPSS 3.93%
  • Published 01.12.2023 02:15:07
  • Last modified 21.11.2024 08:24:05

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component.