CVE-2023-43455

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...

CVE-2023-43455

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...

CVE-2023-43454

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component...

Code injection

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component...

Command injection

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...

Code injection

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...

CVE-2023-43455

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a command execution vulnerability that stems from the IP parameter of the setDiagnosisCfg component failing to properly filter constructed command special characters, commands, and so on...

CVE-2023-48801

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a command execution vulnerability that stems from the switchOpMode component's hostName parameter failing to correctly filter constructed command special characters, commands, and so on. ...

CVE-2023-43453

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a command execution vulnerability that stems from the sub415534 function failing to properly filter construct command special characters, commands, etc. An attacker can exploit this...

PT-2023-28825 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R versions V9.4.0cu.652 B20230116 through V9.4.0cu.852 B20230719 Description: The issue allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component. Recommendations: For versions...

CVE-2023-43454

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component...

CVE-2023-48801

The CVE-2023-48801 entry describes a command-execution vulnerability in TOTOLINK X6000R_Firmware (V9.4.0cu.852_B20230719). The affected component is the shttpd process; specifically sub_415534, which takes fields from the front-end, concatenates them via snprintf, and passes the result to CsteSys...

CVE-2023-48801

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

TOTOLINK X6000R Security Vulnerability

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R version V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719, which stems from the command parameter of the setting/setTracerouteCfg component that can execute arbitrary...

CVE-2023-43454

CVE-2023-43454 affects TOTOLINK X6000R routers (versions V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719). The vulnerability is a remote code execution due to the switchOpMode component’s hostName parameter not correctly filtering constructed commands, allowing an attacker to execute arbitrary ...

CVE-2023-43454

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component...

CVE-2023-43453

CVE-2023-43453 affects TOTOLINK X6000R (V9.4.0cu.652_B20230116 to V9.4.0cu.852_B20230719). The vulnerability arises in the setDiagnosisCfg component where the IP parameter is not properly filtered, allowing a remote attacker to execute arbitrary code. Exploitation details are consistently describ...