Code injection

2024-01-1619:15:00

PRIOn knowledge base

www.prio-n.com

code injection

totolink x6000r

arbitrary code execution

sub_410118 function

shttpd program

7.7 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.

CPENameOperatorVersion
x6000r_firmwareeq9.4.0cu.852-b20230719

CPE	Name	Operator	Version
	x6000r_firmware	eq	9.4.0cu.852-b20230719

References

kee02p.github.io/2024/01/13/CVE-2023-52041/