CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/07/07 2:15 p.m.•32 views

CVE-2023-37146

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...

9.8CVSS9.8AI score0.01958EPSS

SaveExploits1References1

attackerkb•added 2023/07/07 2:15 p.m.•10 views

CVE-2023-37146

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...

9.8CVSS7.4AI score0.01958EPSS

SaveExploits1References2

Cvelist•added 2023/07/07 12:00 a.m.•44 views

CVE-2023-37146

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...

10AI score0.01958EPSS

SaveExploits1References1

CVE•added 2023/07/07 12:00 a.m.•77 views

CVE-2023-37146

TOTOLINK LR350 firmware 9.3.5u.6369_B20220309 is affected by a command injection vulnerability in the UploadFirmwareFile function, exploitable via the FileName parameter. The CVSSv3.1 vector indicates network access, low attack complexity, no authentication, and a high impact on confidentiality, ...

9.8CVSS9.7AI score0.01958EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by