← All advisories

Critical severity9.8NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026

CVE-2023-46422

CVE-2023-46422

Description

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.

Affected products

3

Totolink/X6000r Firmware
cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.652_b20230116:*:*:*:*:*:*:*
Totolink/X6000Rcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = v9.4.0cu.652_B20230116

Patches

Vulnerability mechanics

References

2

github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/9/1.mdnvdExploitThird Party Advisory
www.totolink.cn/index.php/home/menu/detail.htmlnvdProduct

News mentions

0

No linked articles in our index yet.