PT-2026-106300 · Totolink · X6000R

Liumingjie

·

CVE-2026-105484

·

Publicado

2026-10-06

·

Atualizado

2026-10-06

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652 B20230116. The impacted element is the function firmware check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file name leads to os command injection. The attack may be performed from remote.

Correção

OS Command Injection

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78CWE-77

Identificadores relacionados

CVE-2026-105484

Produtos afetados

X6000R