Lucene search

MitreCVE-2023-46414

HistoryOct 25, 2023 - 8:15 p.m.

CVE-2023-46414

2023-10-2520:15:12

CWE-77

mitre

web.nvd.nist.gov

cve-2023-46414

totolink

x6000r

v9.4.0cu.652_b20230116

rce

vulnerability

remote command execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.013

Percentile

86.4%

JSON

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

Affected configurations

Nvd

Node

totolinkx6000r_firmwareMatch9.4.0cu.652_b20230116

AND

totolinkx6000rMatch-

VendorProductVersionCPE
totolinkx6000r_firmware9.4.0cu.652_b20230116cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.652_b20230116:*:*:*:*:*:*:*
totolinkx6000r-cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	x6000r_firmware	9.4.0cu.652_b20230116	cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.652_b20230116:::::::*
totolink	x6000r	-	cpe:2.3:h:totolink:x6000r:-:::::::*

References

github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/14/1.md

www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.013

Percentile

86.4%

JSON

Related for CVE-2023-46414