VULNERABILITY INTELLIGENCE

CVE-2023-48859

CVSS score8.8 HIGH

EPSS probability1.20%

CISA KEVNot currently listed

Published2023-12-06

Last modified2026-06-17

Description

TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows attackers to bypass front-end security restrictions and execute arbitrary code.