An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function.
The vulnerability exists in the sub_415AA4 function of the router's firmware. An attacker can provide specially crafted input data that is not properly validated or filtered, resulting in their interpretation as system commands by the device. The attack requires no authentication, user interaction, or special network conditions, making it trivial to perform remotely.
An attacker can execute arbitrary operating system commands on the device with the privileges of the vulnerable function process, which in practice may lead to complete takeover of the router, violation of data confidentiality and integrity, and disruption of network service availability.
Security patches available from the manufacturer should be applied according to the references. Until the update is applied, it is recommended to restrict access to the device management interface only to trusted IP addresses and disable remote management over the WAN network.
TOTOLINK X6000R with firmware version v9.4.0cu.852_B20230719
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTotolink X6000r
HWTotolinkwszystkie wersjeTotolink X6000r Firmware
OSTotolink9.4.0cu.852_b20230719
Related vulnerabilities
OS Command Injection w TOTOLINK X6000R β zdalne wykonanie poleceΕ
OS Command Injection w firmware routera TOTOLINK X6000R
Command injection w TOTOLINK X6000R β zdalne wykonanie kodu bez uwierzytelnienia
Command injection w TOTOLINK X6000R β zdalne wykonanie poleceΕ bez uwierzytelnienia
Command Injection w TOTOLINK X6000R β wykonanie dowolnych poleceΕ