Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior

Críticas / altas1460▲ 109 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

57 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-43453	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	1/12/2023	17/6/2026	An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.
CVE-2023-48812	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48811	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48810	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48808	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48807	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48806	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48805	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48804	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48803	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-48802	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	30/11/2023	17/6/2026	In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
CVE-2023-46485	Modificada	Crítica (9.8)	1.2%	—	Totolink X6000r Firmware	31/10/2023	17/6/2026	An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component.
CVE-2023-46484	Modificada	Crítica (9.8)	1.2%	—	Totolink X6000r Firmware	31/10/2023	17/6/2026	An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.
CVE-2023-46979	Modificada	Crítica (9.8)	1.5%	—	Totolink X6000r Firmware	31/10/2023	17/6/2026	TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.
CVE-2023-46978	Modificada	Alta (7.5)	0.54%	—	Totolink X6000r Firmware	31/10/2023	17/6/2026	TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.
CVE-2023-46424	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.
CVE-2023-46423	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.
CVE-2023-46422	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.
CVE-2023-46421	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.
CVE-2023-46420	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.
CVE-2023-46419	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.
CVE-2023-46418	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.
CVE-2023-46417	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.
CVE-2023-46416	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.
CVE-2023-46415	Modificada	Crítica (9.8)	1.9%	—	Totolink X6000r Firmware	25/10/2023	17/6/2026	TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.