Vulnerability — CVE-2023-48859

CVE-2023-48859

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-48859
Description:: TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.
Last updated date:: 12/12/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 12/12/2023
Reference url to background: https://github.com/xieqiang11/security_research/blob/main/TOTOLINK-A3002RU-RCE.md