CVE-2023-33486

Summary

CVE-2023-33486 is a command injection vulnerability affecting TOTOLINK X5000R routers with firmware versions V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113. An attacker can exploit this vulnerability by manipulating the "hostName" parameter during a setOpModeCfg request, allowing them to execute arbitrary commands on the affected device. This issue poses a significant risk, as successful exploitation could result in unauthorized access, data theft, or system compromise. Users are strongly advised to update their firmware to the latest, secure version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.