Lucene search
PRIOn knowledge basePRION:CVE-2023-48804HistoryNov 30, 2023 - 6:15 p.m.
Command injection
2023-11-3018:15:00
PRIOn knowledge base
www.prio-n.com
2
totolink x6000r
command injection
shttpd file
sub_4119a0
uci_set_the_str
cstesystem
vulnerability
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| x6000r_firmware | eq | 9.4.0cu.852-b20230719 |
Related
cve
cve
CVE-2023-48804
2023-11-30 18:15:07
cvelist
cvelist
CVE-2023-48804
2023-11-30 00:00:00
nvd
nvd
CVE-2023-48804
2023-11-30 18:15:07