CVE-2023-48859 | BDVDB-2026-218622 Detail

Description#

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.md

Exploit#

No public exploit known

History#

Version 12023-12-06Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.