Design/Logic Flaw

2024-01-1622:15:00

PRIOn knowledge base

www.prio-n.com

flaw

totolink

arbitrary command

7.5 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the ‘lang’ parameter.

CPENameOperatorVersion
x6000r_firmwareeq9.4.0cu.852-b20230719

CPE	Name	Operator	Version
	x6000r_firmware	eq	9.4.0cu.852-b20230719

References

kee02p.github.io/2024/01/13/CVE-2023-52042/