Lucene search

MitreCVE-2023-51011

HistoryDec 22, 2023 - 7:15 p.m.

CVE-2023-51011

2023-12-2219:15:09

mitre

web.nvd.nist.gov

cve-2023-51011

totolink

ex1800t

vulnerability

unauthorized command execution

lanpridns

setlanconfig

cstecgi.cgi

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi

Affected configurations

Nvd

Node

totolinkex1800tMatch-

AND

totolinkex1800t_firmwareMatch9.1.0cu.2112_b20220316

VendorProductVersionCPE
totolinkex1800t-cpe:2.3:h:totolink:ex1800t:-:*:*:*:*:*:*:*
totolinkex1800t_firmware9.1.0cu.2112_b20220316cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1800t	-	cpe:2.3:h:totolink:ex1800t:-:::::::*
totolink	ex1800t_firmware	9.1.0cu.2112_b20220316	cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:::::::*

References

815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanPriDns/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Related for CVE-2023-51011