Code injection

2023-12-0102:15:00

PRIOn knowledge base

www.prio-n.com

totolink

x6000r

code injection

remote attacker

arbitrary code

setdiagnosiscfg component

nvd

8.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

JSON

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.

CPENameOperatorVersion
x6000r_firmwareeq9.4.0cu.652-b20230116
x6000r_firmwareeq9.4.0cu.852-b20230719

CPE	Name	Operator	Version
	x6000r_firmware	eq	9.4.0cu.652-b20230116
	x6000r_firmware	eq	9.4.0cu.852-b20230719

References

github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/2.md