Command injection

2023-12-2219:15:00

PRIOn knowledge base

www.prio-n.com

totolink

command injection

arbitrary command execution

vulnerability

security

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.

CPENameOperatorVersion
ex1200l_firmwareeq9.3.5u.6146-b20201023

CPE	Name	Operator	Version
	ex1200l_firmware	eq	9.3.5u.6146-b20201023

References

815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_setOpModeCfg/