Lucene search

K
cve[email protected]CVE-2023-37172
HistoryJul 07, 2023 - 8:15 p.m.

CVE-2023-37172

2023-07-0720:15:10
CWE-78
web.nvd.nist.gov
104
cve-2023-37172
totolink
a3300r
v17.0.0cu.557_b20221024
command injection
vulnerability
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.028 Low

EPSS

Percentile

90.7%

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

Affected configurations

NVD
Node
totolinka3300r_firmwareMatch17.0.0cu.557_b20221024
AND
totolinka3300rMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.028 Low

EPSS

Percentile

90.7%

Related for CVE-2023-37172