Lucene search

MitreCVE-2023-46978

HistoryOct 31, 2023 - 2:15 p.m.

CVE-2023-46978

2023-10-3114:15:11

CWE-306

mitre

web.nvd.nist.gov

cve-2023-46978

totolink x6000r

vulnerability

incorrect access control

authentication bypass

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

56.1%

JSON

TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.

Affected configurations

Nvd

Node

totolinkx6000r_firmwareMatch9.4.0cu.852_b20230719

AND

totolinkx6000rMatch-

VendorProductVersionCPE
totolinkx6000r_firmware9.4.0cu.852_b20230719cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.852_b20230719:*:*:*:*:*:*:*
totolinkx6000r-cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	x6000r_firmware	9.4.0cu.852_b20230719	cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.852_b20230719:::::::*
totolink	x6000r	-	cpe:2.3:h:totolink:x6000r:-:::::::*

References

github.com/shinypolaris/vuln-reports/blob/master/TOTOLINK%20X6000R/1/README.md

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

56.1%

JSON

Related for CVE-2023-46978