CVE-2023-48808: OS Command Injection

Published Nov 30, 2023

Updated

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function when passed to the CsteSystem function creates a command execution vulnerability.

Affected Software

2 affected components

All of the following

TOTOLINK X6000R Firmware=9.4.0cu.852_b20230719

TOTOLINK X6000R

Event History

Nov 30, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-48808?

The severity of CVE-2023-48808 is critical with a score of 9.8.

What is the affected software for CVE-2023-48808?

The affected software for CVE-2023-48808 is TOTOLINK X6000R V9.4.0cu.852_B20230719 firmware.

What is the vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719?

The vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719 is a command execution vulnerability caused by the shttpd file sub_4119A0 function.

How can the vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719 be exploited?

The vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719 can be exploited by passing malicious fields through the Uci_Set_The_Str function to the CsteSystem function.

Is TOTOLINK X6000R susceptible to CVE-2023-48808?

Yes, TOTOLINK X6000R V9.4.0cu.852_B20230719 firmware is susceptible to CVE-2023-48808.

CVE-2023-48808: OS Command Injection

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2023-48808?

What is the affected software for CVE-2023-48808?

What is the vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719?

How can the vulnerability in TOTOLINK X6000R V9.4.0cu.852_B20230719 be exploited?

Is TOTOLINK X6000R susceptible to CVE-2023-48808?

Company

Resources

Contact