CVE-2023-46413

CVE-2023-46413 affects TOTOLINK X6000R, specifically version 9.4.0cu.652_B20230116, where a command execution vulnerability exists in the sub_4155DC function. The issue enables potentially unauthenticated, network-accessible impact with high to critical severity (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U...

CVE-2023-46422

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411994 function...

CVE-2023-46423

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub417094 function...

CVE-2023-46416

TOTOLINK X6000R firmware version 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability via the sub_41A414 function. Multiple sources document an RCE impact with high/critical severity, enabling an attacker to execute commands remotely without authentication. The exac...

CVE-2023-46423: Improper Neutralization of Special Elements used in a Command

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub417094 function...

CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a command execution vulnerability via the sub 41CC04 function...

PT-2023-30016 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A remote command execution issue was discovered via the sub 412688 function, allowing for potential exploitation. Recommendations: For TOTOLINK X6000R version 9.4.0cu.652 B20230116,...

CVE-2023-46420: Improper Neutralization of Special Elements used in a Command

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...

CVE-2023-46410

CVE-2023-46410 affects TOTOLINK X6000R (v9.4.0cu.652_B20230116). A command-execution vulnerability exists in the sub_416F60 function, enabling potentially remote code execution (attack vector: network, high impact on confidentiality, integrity, availability; CVSS 3.1: 9.8). Mitigation guidance fr...