PT-2023-30019 · Totolink · Totolink X6000R

CVE-2023-46420 · Publicado 2023-10-25 · Atualizado 2024-09-11

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.652 B20230116

Description A remote command execution issue was discovered, allowing for potential exploitation via the sub 41590C function. This could enable unauthorized access and control.

Recommendations For TOTOLINK X6000R version 9.4.0cu.652 B20230116, consider disabling the sub 41590C function as a temporary workaround until a patch is available.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-46420

Produtos afetados

Totolink X6000R

Referências · 5

• 🔥❌ https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/5/1.md · Exploit, Deleted
• https://t.me/cibsecurity/72909 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-46420 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-46420 · Aviso do Fabricante
• https://totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 · Nota