CVE-2023-46422

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411994 function...

CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415730 function...

CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub412688 function...

CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub 41D494 function...

Command injection

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

Command injection

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...

Exploit for CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

VMware has released security updates to address a critical flaw in the vCenter Server that could result in remote code execution on affected systems. The issue, tracked as CVE-2023-34048 CVSS score: 9.8, has been described as an out-of-bounds write vulnerability in the implementation of the DCE/R...

CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415730 function...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

Mirth Connect Deserialization RCE

A vulnerability exists within Mirth Connect due to its mishandling of deserialized data. This vulnerability can be leveraged by an attacker using a crafted HTTP request to execute OS commands within the context of the target application. The original vulnerability was identified by IHTeam and...

CVE-2023-46421

CVE-2023-46421 affects TOTOLINK X6000R, version 9.4.0cu.652_B20230116, with a remote command execution (RCE) vulnerability in the routine at the sub_411D00 function. The available sources describe an RCE impact with high/critical potential (per CVSS metrics in the record) but do not provide rollb...

CVE-2023-46417

The advisory set indicates a remote command execution vulnerability in TOTOLINK X6000R (v9.4.0cu.652_B20230116) that is triggered through the sub_415498 function. The root cause is a flaw in that function, allowing an attacker to execute commands remotely with high impact on confidentiality, inte...

CVE-2023-46414

Summary (CVE-2023-46414) TOTOLINK X6000R firmware 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability that is triggered through the sub_41D494 function. The vulnerability’s root cause and impact are described across multiple sources; the CVSS metrics indicate a cri...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote command execution vulnerability in the sub_422BD4 function. The CVE entry documents RCE with high/critical impact (NVD CVSS3.1 vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8; alternative CNA vector: AV:A/AC:L/PR:N/UI:N/S...

CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411D00 function...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46419

CVE-2023-46419 affects TOTOLINK X6000R with firmware 9.4.0cu.652_B20230116. The issue is a remote command execution via the sub_415730 function. Root cause per the documents is a vulnerability in that function, enabling network-exposed RCE with no user interaction and affecting confidentiality, i...