GHSA-mqx6-fm3x-25wm
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
In TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter filtering. An attacker can achieve arbitrary command execution by constructing the payload.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: July 26, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.