CVE-2023-50147

2023-12-2200:00:00

mitre

www.cve.org

arbitrary command execution

firmware vulnerability

totolink a3700r

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822_B20200513.

References

815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R%28setDiagnosisCfg%29/