CVE-2023-33486

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter...

CVE-2023-33486

CVE-2023-33486 affects TOTOLINK X5000R firmware versions V9.1.0u.6118_B20201102 through V9.1.0u.6369_B20230113. The root cause is a command injection in setOpModeCfg that permits executing arbitrary commands via the hostName parameter. Documents do not provide exploit details or a confirmed patch...

CVE-2023-33486

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter...