Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.1041_b20240224:*:*:*:*:*:*:*

part: o version: 9.4.0cu.1041_b20240224 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductX6000R Firmware (e31d7b79-e7ec-564c-aa20-e5cd53519c87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52723 vulnerable 2026-06-08 06:52:16.175226 Details available
In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter filtering. An attacker can achieve arbitrary command execution by constructing the payload.
Published: 2024-11-22T00:00:00.000Z
Updated: 2026-07-05T00:51:09.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.