4 matches found
CVE-2023-37146
TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...
9.8CVSS9.8AI score0.01958EPSS
SaveExploits1References1
CVE-2023-37146
TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...
9.8CVSS7.4AI score0.01958EPSS
SaveExploits1References2
CVE-2023-37146
TOTOLINK LR350 firmware 9.3.5u.6369_B20220309 is affected by a command injection vulnerability in the UploadFirmwareFile function, exploitable via the FileName parameter. The CVSSv3.1 vector indicates network access, low attack complexity, no authentication, and a high impact on confidentiality, ...
9.8CVSS9.7AI score0.01958EPSS
SaveExploits1References1Affected Software1
20