CVE-2023-43455

2023-12-0100:00:00

mitre

www.cve.org

totolink x6000r

remote attacker

arbitrary code execution

setting component

AI Score

9.9

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.

References

github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/3.md