Command Execution Vulnerability in TOTOLINK X6000R Product
CVE-2023-48802
9.8CRITICAL
What is CVE-2023-48802?
The TOTOLINK X6000R has a command execution vulnerability found in the shttpd file. Specifically, the sub_4119A0 function is susceptible to exploitation through improper handling of input fields via the Uci_Set_Str function, which can lead to unauthorized command execution when utilized within the CsteSystem function. This flaw may allow attackers to execute arbitrary commands on the device, posing a risk to security and stability.