CVE-2023-52042

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-01-16 · updated 2026-06-17
Weakness: CWE-77

Description

An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.

Affected products

TOTOLINK X6000R: 9.4.0cu.852_b20230719

References

https://kee02p.github.io/2024/01/13/CVE-2023-52042/
https://kee02p.github.io/2024/01/13/CVE-2023-52042/

Get alerted when CVE-2023-52042 or the next vulnerability affects your stack