CVE-2023-48805
CRITICAL 9.8EPSS 1.5%
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.54% chance of exploitation in the next 30 days, 73th percentile
- Published
- 2023-11-30
- Updated
- 2024-08-02