CVE-2023-51034

2023-12-2219:15:09

CWE-434

[email protected]

web.nvd.nist.gov

totolink

ex1200l

arbitrary command execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

82.8%

JSON

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.

Affected configurations

Nvd

Node

totolinkex1200l_firmwareMatch9.3.5u.6146_b20201023

AND

totolinkex1200lMatch-

VendorProductVersionCPE
totolinkex1200l_firmware9.3.5u.6146_b20201023cpe:2.3:o:totolink:ex1200l_firmware:9.3.5u.6146_b20201023:*:*:*:*:*:*:*
totolinkex1200l-cpe:2.3:h:totolink:ex1200l:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1200l_firmware	9.3.5u.6146_b20201023	cpe:2.3:o:totolink:ex1200l_firmware:9.3.5u.6146_b20201023:::::::*
totolink	ex1200l	-	cpe:2.3:h:totolink:ex1200l:-:::::::*