CVE-2023-48859

2023-12-0600:00:00

mitre

www.cve.org

totolink a3002ru

version 2.0.0-b20190902.1958

post-authentication

rce

incorrect access control

security restrictions

arbitrary code

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

References

github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.md