exploitDog

CVE-2023-50651

Опубликовано: 30 дек. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.

Ссылки

http://totolink.com
Not Applicable
https://palm-jump-676.notion.site/X6000R-sub_4119A0-11-b35b4ca36ce84e07afff85c98414d293
Exploit
Third Party Advisory
http://totolink.com
Not Applicable
https://palm-jump-676.notion.site/X6000R-sub_4119A0-11-b35b4ca36ce84e07afff85c98414d293
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.852_b20230719:*:*:*:*:*:*:*

cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05416

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

CWE-78

Связанные уязвимости

GHSA-mv97-cv2v-gqc7

CVSS3: 9.8

github

около 2 лет назад

TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.

EPSS

Процентиль: 90%

0.05416

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

CWE-78