PT-2023-30963 · Totolink · Totolink X6000R

Published 2023-12-04 · Updated 2023-12-07 · CVE-2023-48799

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK-X6000R version V9.4.0cu.852 B20230719

Description The issue allows for Command Execution.

Recommendations For TOTOLINK-X6000R version V9.4.0cu.852 B20230719, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2023-48799

Affected Products

Totolink X6000R

References · 9

• 🔥 https://palm-jump-676.notion.site/CVE-2023-48799-632dd667b4574a2c84b04035d04afb5c · Exploit
• 🔥 https://notion.so/X6000R-632dd667b4574a2c84b04035d04afb5c?pvs=4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-48799 · Security Note
• https://osv.dev/vulnerability/CVE-2023-48799 · Vendor Advisory
• https://twitter.com/CVEnew/status/1731651927526830360 · Twitter Post
• https://t.me/cvenotify/62808 · Telegram Post
• https://twitter.com/RedPacketSec/status/1732704510164758623 · Twitter Post
• https://t.me/cvenotify/62084 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1731701439565623329 · Twitter Post