CVE-2024-52723

creationtimestamp| type| source ---|---|--- 2026-06-21 07:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3morufu3whu2e...

CVE-2024-52723

In TOTOLINK X6000R V9.4.0cu.1041B20240224 in the shttpd file, the UciSet Str function is used without strict parameter filtering. An attacker can achieve arbitrary command execution by constructing the payload...

CVE-2024-52723

In TOTOLINK X6000R, affected firmware 9.4.0cu.1041_B20240224, the vulnerability stems from using the Uci_Set Str function in the shttpd file without strict parameter filtering. This can allow an attacker to craft a payload that leads to arbitrary command execution (remote, network-based access; n...