Command injection

2024-01-2516:15:00

PRIOn knowledge base

www.prio-n.com

totolink x2000r_v2

command injection

vulnerability

formuploadfile

boa

7.7 High

AI Score

Confidence

Low

0.054 Low

EPSS

Percentile

93.2%

TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.

CPENameOperatorVersion
x2000r_firmwareeq2.0.0-b20230727.10434

CPE	Name	Operator	Version
	x2000r_firmware	eq	2.0.0-b20230727.10434

References

github.com/unpWn4bL3/iot-security/blob/main/29.md