CVE-2023-43455

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-12-01 · updated 2026-06-17
Weakness: CWE-77

Description

An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.

Affected products

TOTOLINK X6000R: 9.4.0cu.652_b20230116, 9.4.0cu.852_b20230719

References

https://github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/3.md
https://github.com/tharsis1024/vuln/blob/main/TOTOLINK/X6000R/3.md

Get alerted when CVE-2023-43455 or the next vulnerability affects your stack