CVE-2023-43454

2023-12-0100:00:00

mitre

www.cve.org

cve-2023-43454

totolink x6000r

remote code execution

AI Score

9.8

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component.

References

github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/1.md