Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-48812
HistoryNov 30, 2023 - 6:15 p.m.

Command injection

2023-11-3018:15:00
PRIOn knowledge base
www.prio-n.com
1
totolink x6000r
shttpd
sub_4119a0
command execution
vulnerability

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.9%

In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.

CPENameOperatorVersion
x6000r_firmwareeq9.4.0cu.852-b20230719

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.9%

Related for PRION:CVE-2023-48812