CVE-2023-48806

TOTOLINK X6000R V9.4.0cu.852_B20230719 is affected by a command-execution vulnerability in the shttpd component (sub_4119A0). The issue arises when fields obtained from the front-end via the Uci_Set_ The_Str function are passed to CsteSystem, enabling arbitrary command execution. Connected report...

CVE-2023-48812

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file sub4119A0 function obtains fields from the front-end through Uci Set The Str function that when passed to the CsteSystem function creates a command execution vulnerability...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability, which stems from the requestUser parameter of the sub4119A0 function failin...

CVE-2023-48802

The CVE-2023-48802 entry affects TOTOLINK X6000R (V9.4.0cu.852_B20230719). The vulnerability originates in the shttpd module’s sub_4119A0 function, which obtains fields from the front-end and passes them through Uci_Set_ The_Str to CsteSystem, enabling command execution. This is described as a re...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability that stems from the url parameter of the sub4119A0 function failing to...

TOTOLINK X6000R Security Breach

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from the presence of a command execution vulnerability...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China Gion Electronics that supports WiFi 6 technology with high concurrent connections and dual-band transmission. TOTOLINK X6000R suffers from a command execution vulnerability that stems from the pass parameter of the sub4119A0 function failing to...

CVE-2023-48807

CVE-2023-48807 affects TOTOLINK X6000R (V9.4.0cu.852_B20230719). The vulnerability is in the shttpd component where sub_4119A0 obtains front-end fields via Uci_Set_The Str and passes them to CsteSystem, enabling command execution. Impact is high (remote attacker network access, no user interactio...

PT-2023-7632 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: The issue arises from the sub 4119A0 function in the shttpd file, which obtains fields from the front-end through the Uci Set The Str function. When these fields are passed to the...

CVE-2023-48808

TOTOLINK X6000R (V9.4.0cu.852_B20230719) is affected by a command execution vulnerability in the shttpd front-end handling. The issue arises in the sub_4119A0 function, which obtains fields via Uci_Set_The_Str and passes them to CsteSystem, enabling arbitrary command execution. Affected component...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from the failure of the formEnable parameter of the sub4119A0 function to correctly filter the construct command...

CVE-2023-48806

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48810

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48802

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48804

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48810

CVE-2023-48810 affects TOTOLINK X6000R (V9.4.0cu.852_B20230719). The shttpd service’s sub_4119A0 uses front-end fields via Uci_Set_The_Str passed to CsteSystem, creating a command execution vulnerability. Public details in connected sources describe a remote command-injection risk with high impac...

CVE-2023-48803

CVE-2023-48803 affects TOTOLINK X6000R V9.4.0cu.852_B20230719. The shttpd component’s sub_4119A0 routine obtains fields from the front-end via Uci_Set_The_Str and passes them to CsteSystem, enabling command execution on the device. CVSS v3.1 metrics indicate network access, no privileges, no user...

CVE-2023-48805

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability...

PT-2023-7584 · Totolink · Totolink X5000R

Name of the Vulnerable Software and Affected Versions: Totolink X5000R version 9.1.0cu.2300 B20230112 Description: A critical issue affects the function...

TOTOLINK A3700R Code Execution Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A code execution vulnerability exists in the TOTOLINK A3700R v9.1.2u.6134B20201202 version, which can be exploited by an attacker to execute arbitrary code on the system...