Lucene search

[email protected]CVE-2023-29802

HistoryApr 14, 2023 - 2:15 p.m.

CVE-2023-29802

2023-04-1414:15:11

CWE-77

[email protected]

web.nvd.nist.gov

cve-2023-29802

totolink x18

v9.1.0cu.2024_b20220329

command injection

vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.545 Medium

EPSS

Percentile

97.7%

JSON

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

Affected configurations

NVD

Node

totolinkx18_firmwareMatch9.1.0cu.2021_b20220326

totolinkx18_firmwareMatch9.1.0cu.2024_b20220329

AND

totolinkx18Match-

CPENameOperatorVersion
totolink:x18_firmwaretotolink x18 firmwareeq9.1.0cu.2021_b20220326
totolink:x18_firmwaretotolink x18 firmwareeq9.1.0cu.2024_b20220329

CPE	Name	Operator	Version
totolink:x18_firmware	totolink x18 firmware	eq	9.1.0cu.2021_b20220326
totolink:x18_firmware	totolink x18 firmware	eq	9.1.0cu.2024_b20220329

References

sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.545 Medium

EPSS

Percentile

97.7%

JSON

Related for CVE-2023-29802

nvd1 prion1 cvelist1