PT-2026-5443 · Totolink · Totolink X6000R
CVE-2026-1723
·
Publicado
2026-01-30
·
Atualizado
2026-01-30
CVSS v4.0
9.2
Crítica
| Vetor | AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
TOTOLINK X6000R versions through V9.4.0cu.1498 B20250826
Description
A flaw exists in TOTOLINK X6000R that allows for OS Command Injection due to improper neutralization of special elements used in OS commands. This allows attackers to execute arbitrary commands on the system. The vulnerability enables unauthenticated remote attackers to compromise the device.
Recommendations
Update TOTOLINK X6000R to a version later than V9.4.0cu.1498 B20250826.
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Totolink X6000R