Totolink

X6000r Firmware

57 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-7907

Exploit
  • EPSS 2.74%
  • Veröffentlicht 18.08.2024 16:15:04
  • Zuletzt bearbeitet 19.08.2024 18:53:05

A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument rtLogServer leads to command in...

8.8

CVE-2024-2353

Exploit
  • EPSS 6.27%
  • Veröffentlicht 10.03.2024 08:15:05
  • Zuletzt bearbeitet 16.12.2024 22:57:06

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip l...

9.8

CVE-2024-1781

Exploit
  • EPSS 17.78%
  • Veröffentlicht 23.02.2024 01:15:52
  • Zuletzt bearbeitet 01.04.2025 15:35:54

A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation leads to command injectio...

5.5

CVE-2024-1661

Exploit
  • EPSS 0.06%
  • Veröffentlicht 20.02.2024 13:15:08
  • Zuletzt bearbeitet 21.11.2024 08:51:01

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to laun...

9.8

CVE-2023-52040

Exploit
  • EPSS 0.1%
  • Veröffentlicht 24.01.2024 18:15:08
  • Zuletzt bearbeitet 21.11.2024 08:39:03

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function.

9.8

CVE-2023-52039

Exploit
  • EPSS 0.12%
  • Veröffentlicht 24.01.2024 18:15:08
  • Zuletzt bearbeitet 30.05.2025 15:15:26

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function.

9.8

CVE-2023-52038

Exploit
  • EPSS 0.12%
  • Veröffentlicht 24.01.2024 18:15:08
  • Zuletzt bearbeitet 30.05.2025 15:15:26

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.

9.8

CVE-2023-52042

Exploit
  • EPSS 0.28%
  • Veröffentlicht 16.01.2024 22:15:37
  • Zuletzt bearbeitet 21.11.2024 08:39:03

An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.

9.8

CVE-2023-52041

Exploit
  • EPSS 0.26%
  • Veröffentlicht 16.01.2024 19:15:08
  • Zuletzt bearbeitet 17.06.2025 14:15:28

An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.

9.8

CVE-2023-50651

Exploit
  • EPSS 2.87%
  • Veröffentlicht 30.12.2023 17:15:08
  • Zuletzt bearbeitet 17.04.2025 20:15:25

TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.