Page 6 of 44 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2023-46978

https://notcve.org/view.php?id=CVE-2023-46978

TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication. TOTOLINK X6000R V9.4.0cu.852_B20230719 es vulnerable a un control de acceso incorrecto. Los atacantes pueden restablecer la contraseña de inicio de sesión y las contraseñas de WIFI sin autenticación. • https://github.com/shinypolaris/vuln-reports/blob/master/TOTOLINK%20X6000R/1/README.md • CWE-306: Missing Authentication for Critical Function •

CVSS: 9.8EPSS: 72%CPEs: 2EXPL: 1

CVE-2023-46979

https://notcve.org/view.php?id=CVE-2023-46979

TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function. Se descubrió que TOTOLINK X6000R V9.4.0cu.852_B20230719 contiene una vulnerabilidad de inyección de comando a través del parámetro enable en la función setLedCfg. • https://github.com/shinypolaris/vuln-reports/blob/master/TOTOLINK%20X6000R/2/README.md • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 1

CVE-2023-46414

https://notcve.org/view.php?id=CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function. Se descubrió que TOTOLINK X6000R v9.4.0cu.652_B20230116 contiene una vulnerabilidad de ejecución remota de comandos (RCE) a través de la función sub_41D494. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/14/1.md https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 1

CVE-2023-46420

https://notcve.org/view.php?id=CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function. Se descubrió que TOTOLINK X6000R v9.4.0cu.652_B20230116 contiene una vulnerabilidad de ejecución remota de comandos (RCE) a través de la función sub_41590C. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/5/1.md https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.8EPSS: 2%CPEs: 2EXPL: 1

CVE-2023-46408

https://notcve.org/view.php?id=CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function. Se descubrió que TOTOLINK X6000R v9.4.0cu.652_B20230116 contiene una vulnerabilidad de ejecución de comandos a través de la función sub_ The 41DD80. • https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/16/1.md https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •