CVE-2023-4746

A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the impact is to bypass the validation which leads to to OS command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635.

• CWE-134
• CWE-134

• https://gist.github.com/dmknght/8f3b6aa65e9d08f45b5236c6e9ab8d80Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.238635Permissions Required
• https://vuldb.com/?id.238635Third Party Advisory
• https://gist.github.com/dmknght/8f3b6aa65e9d08f45b5236c6e9ab8d80Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.238635Permissions Required
• https://vuldb.com/?id.238635Third Party Advisory

Published

Sep 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47453An Untrusted search path vulnerability in Sohu Video Player …7.8
• CVE-2023-47454An Untrusted search path vulnerability in NetEase CloudMusic…7.8
• CVE-2023-47455Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability…9.1
• CVE-2023-47456Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerabilit…9.1
• CVE-2023-47458An issue in SpringBlade v.3.7.0 and before allows a remote a…9.8
• CVE-2023-47459An issue in Knovos Discovery v.22.67.0 allows a remote attac…6.5
• CVE-2023-47460SQL injection vulnerability in Knovos Discovery v.22.67.0 al…8.8
• CVE-2023-47462Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215…9.8
• CVE-2023-47463Insecure Permissions vulnerability in GL.iNet AX1800 version…9.8
• CVE-2023-47464Insecure Permissions vulnerability in GL.iNet AX1800 version…8.8
• CVE-2023-47465An issue in GPAC v.2.2.1 and before allows a local attacker …5.5
• CVE-2023-47466TagLib before 2.0 allows a segmentation violation and applic…7.1