Lucene search

K
nvd[email protected]NVD:CVE-2023-52038
HistoryJan 24, 2024 - 6:15 p.m.

CVE-2023-52038

2024-01-2418:15:08
CWE-77
web.nvd.nist.gov
totolink
x6000r
arbitrary commands

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.

Affected configurations

NVD
Node
totolinkx6000rMatch-
AND
totolinkx6000r_firmwareMatch9.4.0cu.852_b20230719

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

Related for NVD:CVE-2023-52038