Lucene search

[email protected]CVE-2023-36954

HistoryOct 16, 2023 - 6:15 a.m.

CVE-2023-36954

2023-10-1606:15:10

CWE-77

[email protected]

web.nvd.nist.gov

cve-2023-36954

totolink

cp300+

v5.2cu.7594_b20200910

command injection

vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.641 Medium

EPSS

Percentile

97.9%

JSON

TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.

Affected configurations

NVD

Node

totolinkcp300\+_firmwareMatch5.2cu.7594_b20200910

AND

totolinkcp300\+Match-

CPENameOperatorVersion
totolink:cp300\+_firmwaretotolink cp300+ firmwareeq5.2cu.7594_b20200910

CPE	Name	Operator	Version
totolink:cp300\+_firmware	totolink cp300+ firmware	eq	5.2cu.7594_b20200910

References

github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_3.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.641 Medium

EPSS

Percentile

97.9%

JSON

Related for CVE-2023-36954

prion1 cvelist1 nvd1