CVE-2023-46414

Summary (CVE-2023-46414) TOTOLINK X6000R firmware 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability that is triggered through the sub_41D494 function. The vulnerability’s root cause and impact are described across multiple sources; the CVSS metrics indicate a cri...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote command execution vulnerability in the sub_422BD4 function. The CVE entry documents RCE with high/critical impact (NVD CVSS3.1 vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8; alternative CNA vector: AV:A/AC:L/PR:N/UI:N/S...

Mirth Connect Deserialization RCE

A vulnerability exists within Mirth Connect due to its mishandling of deserialized data. This vulnerability can be leveraged by an attacker using a crafted HTTP request to execute OS commands within the context of the target application. The original vulnerability was identified by IHTeam and...

CVE-2023-46418

TOTOLINK X6000R is affected (version 9.4.0cu.652_B20230116). The vulnerability is a remote code execution via the sub_412688 function. Root cause: an issue in the sub_412688 routine allows an attacker to execute commands remotely. Impact is described as high/critical (per CVE records). There is n...

CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411D00 function...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46419

CVE-2023-46419 affects TOTOLINK X6000R with firmware 9.4.0cu.652_B20230116. The issue is a remote command execution via the sub_415730 function. Root cause per the documents is a vulnerability in that function, enabling network-exposed RCE with no user interaction and affecting confidentiality, i...

CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...

CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote code execution vulnerability in the sub_41590C function. The issue enables an attacker to execute arbitrary commands remotely (RCE). Impact is reported as high/critical across confidentiality, integrity, and availability. The vulnerab...

CVE-2023-46416

TOTOLINK X6000R firmware version 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability via the sub_41A414 function. Multiple sources document an RCE impact with high/critical severity, enabling an attacker to execute commands remotely without authentication. The exac...

CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...

CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...

CVE-2023-46415

The CVE-2023-46415 entry concerns TOTOLINK X6000R, affected version 9.4.0cu.652_B20230116, with a remote command execution (RCE) vulnerability exploitable via the sub_41E588 function. Documents indicate impact is high, with potential unauthorized command execution affecting confidentiality, integ...

CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub412688 function...

CVE-2023-46423

Summary: CVE-2023-46423 affects TOTOLINK X6000R devices, specifically version 9.4.0cu.652_B20230116, with a remote command execution vulnerability exposed via the sub_417094 function. The NVD entry rates the impact as high to critical (CVSSv3.1: base 9.8, network attack vector, no user interactio...

CVE-2023-46422

CVE-2023-46422 affects TOTOLINK X6000R, specifically v9.4.0cu.652_B20230116. The vulnerability is a remote command execution via the sub_411994 function, impacting firmware with high/severe impact (CVE metrics: CRITICAL/ HIGH by CVSS 3.1). The connected sources confirm the affected component and ...

Oracle Linux 8 : php:8.0 (ELSA-2023-5927)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5927 advisory. libzip php 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted t...