CVE-2023-48800

2023-12-0400:00:00

mitre

www.cve.org

totolink x6000r

firmware v9.4.0cu

command execution vulnerability

vulnerability

cve-2023-48800

shttpd file sub_417338 function

snprintf function

cstesystem function

9.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

JSON

In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability.