CVE-2023-6612

A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B20230112. It has been rated as critical. This issue affects the function setDdnsCfg/setDynamicRoute/setFirewallType/setIPSecCfg/setIpPortFilterRules/setLancfg/setLoginPasswordCfg/setMacFilterRules/setMtknatCfg/setNetworkConfig/setPortForwardRules/setRemoteCfg/setSSServer/setScheduleCfg/setSmartQosCfg/setStaticDhcpRules/setStaticRoute/setVpnAccountCfg/setVpnPassCfg/setVpnUser/setWiFiAclAddConfig/setWiFiEasyGuestCfg/setWiFiGuestCfg/setWiFiRepeaterConfig/setWiFiScheduleCfg/setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247247. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-78

• https://github.com/OraclePi/repo/tree/main/totolink%20X5000RExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247247Third Party Advisory
• https://vuldb.com/?id.247247Third Party Advisory
• https://github.com/OraclePi/repo/tree/main/totolink%20X5000RExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247247Third Party Advisory
• https://vuldb.com/?id.247247Third Party Advisory

Published

Dec 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6606An out-of-bounds read vulnerability was found in smbCalcSize…7.1
• CVE-2023-6607A vulnerability has been found in Tongda OA 2017 up to 11.10…7.5
• CVE-2023-6608A vulnerability was found in Tongda OA 2017 up to 11.9 and c…7.5
• CVE-2023-6609A vulnerability was found in osCommerce 4. It has been class…6.1
• CVE-2023-6610An out-of-bounds read vulnerability was found in smb2_dump_d…7.1
• CVE-2023-6611A vulnerability was found in Tongda OA 2017 up to 11.9. It h…7.5
• CVE-2023-6613A vulnerability classified as problematic has been found in …4.8
• CVE-2023-6614A vulnerability classified as problematic was found in Typec…2.7
• CVE-2023-6615A vulnerability, which was classified as problematic, has be…5.3
• CVE-2023-6616A vulnerability was found in SourceCodester Simple Student A…6.1
• CVE-2023-6617A vulnerability was found in SourceCodester Simple Student A…9.8
• CVE-2023-6618A vulnerability was found in SourceCodester Simple Student A…8.8