CVE-2023-52042

TOTOLINK X6000R's sub_4117F8 function allows remote code execution by crafting the lang parameter. Affected firmware: V9.4.0cu.852_B20230719. Root cause: inadequate filtering of command-related characters in sub_4117F8. Impact: unrestricted command execution with high confidentiality/integrity/av...