CVE-2023-48859

2023-12-0600:00:00

mitre

www.cve.org

totolink a3002ru

version 2.0.0-b20190902.1958

post-authentication

rce

incorrect access control

security restrictions

arbitrary code

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

References

github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.md