CVE-2023-48811
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-48811 is a critical vulnerability that affects TOTOLINK X6000R V9.4.0cu.852_B20230719. The vulnerability allows for command execution through the shttpd file and the sub_4119A0 function, which obtains fields from the front-end. This is done through the Uci_Set_Str function, and when passed to the CsteSystem function, it creates the command execution vulnerability. The vulnerability has a base severity score of 9.8 out of 10 and poses a high risk to organizations as it can be exploited remotely without requiring any privileges or user interaction. It has a high impact on both integrity and confidentiality, potentially leading to unauthorized access and data compromises. Organizations should apply remediation measures promptly to mitigate the risk posed by this vulnerability in their TOTOLINK X6000R V9.4.0cu.852_B20230719 devices.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions