Lucene search
K

The vulnerability of the cstecgi.cgi implementation in TOTOLINK X5000R router microprogramming software allows a perpetrator to execute arbitrary commands.

🗓️ 12 Dec 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 9 Views

cstecgi.cgi flaw in TOTOLINK X5000R routers allows remote command execution from unsanitized OS elements.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Command Injection in Totolink A3700R_Firmware
10 Aug 202313:15
githubexploit
CNNVD
TOTOLINK X5000R Operating System Command Injection Vulnerability
8 Dec 202300:00
cnnvd
CVE
CVE-2023-6612
8 Dec 202315:31
cve
Cvelist
CVE-2023-6612 Totolink X5000R cstecgi.cgi setWizardCfg os command injection
8 Dec 202315:31
cvelist
EUVD
EUVD-2023-58835
8 Dec 202315:31
euvd
NVD
CVE-2023-6612
8 Dec 202316:15
nvd
OSV
CVE-2023-6612
8 Dec 202316:15
osv
Prion
Command injection
8 Dec 202316:15
prion
Positive Technologies
PT-2023-7584 · Totolink · Totolink X5000R
28 Nov 202300:00
ptsecurity
RedhatCVE
CVE-2023-6612
23 May 202502:06
redhatcve
Rows per page
Vulners
Node
totolinkx5000rMatch9.1.0cu.2300_b20230112

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Dec 2023 00:00Current
6.7Medium risk
Vulners AI Score6.7
CVSS 35.5
CVSS 25.8
EPSS0.30683
9