CVE-2023-46420

Summary

CVE-2023-46420 is a newly disclosed vulnerability affecting the TOTOLINK X6000R v9.4.0cu.652_B20230116 firmware. This issue permits remote attackers to execute arbitrary commands through the sub_41590C function, posing a significant security risk. By exploiting this Remote Command Execution (RCE) vulnerability, malicious actors can gain unauthorized access to the affected device and potentially take control of it. System administrators are strongly advised to upgrade their firmware to a secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.