Unrated severityNVD Advisory· Published Dec 7, 2023· Updated Aug 2, 2024

CVE-2023-48860

Description

TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attackers can bypass front-end security restrictions and execute arbitrary code.

Affected products

Totolink/CX-N300RTcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 3.2.4-B20180730.0906

Patches

Vulnerability mechanics

References

github.com/xieqiang11/security_research/blob/main/TOTOLINK-N300RT-RCE.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000