CVE-2023-50651

CriticalCVSS 9.8

Published: 30/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.52%

72th percentile - higher than 72% of all known CVEs

Summary

A remote command execution (RCE) vulnerability was discovered in the TOTOLINK X6000R router running firmware version v9.4.0cu.852_B20230719, specifically in the /cgi-bin/cstecgi.cgi component. An attacker can send a crafted request to execute arbitrary commands on the device.

Risk Assessment

The risk for the organization is that an unauthorized attacker could gain full control over the router, potentially compromising network confidentiality and integrity.

Recommendation

It is recommended to immediately update the TOTOLINK X6000R firmware to the latest version that fixes this vulnerability. If an update is not available, restrict management interface access to trusted networks only.

Original NVD description (English source)

TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.