High severity8.8NVD Advisory· Published Dec 6, 2023· Updated Jun 17, 2026
CVE-2023-48859
CVE-2023-48859
Description
TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.
Affected products
3- cpe:2.3:o:totolink:a3002ru_firmware:2.0.0-b20190902.1958:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.