Lucene search

MitreCVE-2023-51014

HistoryDec 22, 2023 - 7:15 p.m.

CVE-2023-51014

2023-12-2219:15:09

CWE-77

mitre

web.nvd.nist.gov

cve-2023-51014

totolink

ex1800t

vulnerability

unauthorized arbitrary command execution

lansecdns

setlanconfig

cstecgi

cgi

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.012

Percentile

85.8%

JSON

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi

Affected configurations

Nvd

Node

totolinkex1800t_firmwareMatch9.1.0cu.2112_b20220316

AND

totolinkex1800tMatch-

VendorProductVersionCPE
totolinkex1800t_firmware9.1.0cu.2112_b20220316cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:*:*:*:*:*:*:*
totolinkex1800t-cpe:2.3:h:totolink:ex1800t:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1800t_firmware	9.1.0cu.2112_b20220316	cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:::::::*
totolink	ex1800t	-	cpe:2.3:h:totolink:ex1800t:-:::::::*

References

815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig_lanSecDns/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.012

Percentile

85.8%

JSON

Related for CVE-2023-51014