Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TotolinkX6000r Firmware9.4.0cu.852 b20230719

9 matches found

CVE
CVE•added 2024/03/10 8:15 a.m.•72 views

CVE-2024-2353

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be i...

9CVSS9AI score0.1232EPSS
CVE
CVE•added 2024/02/20 1:15 p.m.•58 views

CVE-2024-1661

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity o...

5.5CVSS4AI score0.00048EPSS
CVE
CVE•added 2024/08/18 4:15 p.m.•47 views

CVE-2024-7907

A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument rtLogServer leads to command injection. The attack may be initiated remotely. Th...

9.8CVSS7.1AI score0.01521EPSS
CVE
CVE•added 2024/01/24 6:15 p.m.•33 views

CVE-2023-52039

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function.

9.8CVSS9.4AI score0.00122EPSS
CVE
CVE•added 2024/01/24 6:15 p.m.•32 views

CVE-2023-52038

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.

9.8CVSS9.4AI score0.00122EPSS
CVE
CVE•added 2024/01/16 7:15 p.m.•31 views

CVE-2023-52041

An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 function of the shttpd program.

9.8CVSS9.4AI score0.00263EPSS
CVE
CVE•added 2024/01/16 10:15 p.m.•31 views

CVE-2023-52042

An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.

9.8CVSS9.4AI score0.00278EPSS
CVE
CVE•added 2024/01/24 6:15 p.m.•27 views

CVE-2023-52040

An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function.

9.8CVSS9.4AI score0.00137EPSS
CVE
CVE•added 2024/02/23 1:15 a.m.•27 views

CVE-2024-1781

A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation leads to command injection. The exploit has been disclosed to the public a...

9.8CVSS6.8AI score0.05694EPSS