CVE-2023-43453

2023-12-0100:00:00

mitre

www.cve.org

totolink x6000r

v9.4.0cu

remote code execution

setdiagnosiscfg

ip parameter

9.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.

References

github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/2.md