Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter filtering. An attacker can achieve arbitrary command execution by constructing the payload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TOTOLINK X6000R 安全漏洞
Vulnerability Description
TOTOLINK X6000R是中国吉翁电子（TOTOLINK）公司的一款无线路由器。 TOTOLINK X6000R V9.4.0cu.1041_B20240224版本存在安全漏洞，该漏洞源于没有对Uci_Set Str函数的参数进行严格过滤。攻击者利用该漏洞可以通过构造payload执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A