Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 58

Export CSV
CVE-2023-46422

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46413

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46412

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46411

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46410

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-43455

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-43453

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2024-7907

TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument rtLogServer leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.3 Medium EPSS 6.2% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware