Totolink

X6000r Firmware

52 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-43453

Exploit
  • EPSS 3.93%
  • Published 01.12.2023 02:15:07
  • Last modified 21.11.2024 08:24:05

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.

9.8

CVE-2023-48812

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:08
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48811

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:08
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48810

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:08
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48808

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:08
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48807

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:07
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48806

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:07
  • Last modified 21.11.2024 08:32:29

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48805

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:07
  • Last modified 21.11.2024 08:32:28

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48804

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:07
  • Last modified 21.11.2024 08:32:28

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.

9.8

CVE-2023-48803

Exploit
  • EPSS 0.35%
  • Published 30.11.2023 18:15:07
  • Last modified 21.11.2024 08:32:28

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.