CVE-2023-48811

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function that when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48811

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function that when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-48811

CVE-2023-48811 affects TOTOLINK X6000R, version V9.4.0cu.852_B20230719. The vulnerability is in the router’s shttpd frontend handling, where the sub_4119A0 function obtains fields from the front-end via Uci_Set_ and passes them to the Str function, which then is used by CsteSystem to execute comm...