CVE-2023-39618

CriticalCVSS 9.8

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.39%

69th percentile - higher than 69% of all known CVEs

The TOTOLINK X5000R B20210419 device was found to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.

This vulnerability could allow attackers to remotely execute code on the device, posing a serious security threat to the network.

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.