CVE-2023-48800

The vulnerability CVE-2023-48800 affects TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719. It stems from the shttpd file’s sub_417338 routine, which collects fields from the front-end, concatenates them via snprintf, and passes them to CsteSystem, enabling a command execution vulnerability. Affect...

CVE-2023-48800

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...