CVE-2023-52039

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 24, 2024
Updated: Jan 30, 2024
CWE ID 77

Summary

CVE-2023-52039 is a newly disclosed vulnerability affecting TOTOLINK X6000R v9.4.0cu.852_B20230719. This issue permits attackers to execute arbitrary commands through the sub_415AA4 function, potentially leading to significant security risks. Exploitation of this vulnerability could result in unauthorized system access, data theft, or even system takeover. Users are strongly encouraged to update their routers to the latest available firmware to mitigate this threat. Failure to do so may leave the affected devices vulnerable to attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Totolink X6000R Firmware

Affected Vendors

  • TOTOLINK