Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-33486 EUVD-2023-37649GHSA-g2mg-vmcx-3677

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerabi…

Published May 31, 2023 · Updated Jan 9, 2025 · Assigned by mitre

Description

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.

References