Lucene search

MitreCVE-2023-51023

HistoryDec 22, 2023 - 6:15 p.m.

CVE-2023-51023

2023-12-2218:15:07

mitre

web.nvd.nist.gov

cve-2023-51023

totolink

ex1800t

arbitrary command execution

ntpsyncwithhost

cstecgi

cgi

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.

Affected configurations

Nvd

Node

totolinkex1800t_firmwareMatch9.1.0cu.2112_b20220316

AND

totolinkex1800tMatch-

VendorProductVersionCPE
totolinkex1800t_firmware9.1.0cu.2112_b20220316cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:*:*:*:*:*:*:*
totolinkex1800t-cpe:2.3:h:totolink:ex1800t:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1800t_firmware	9.1.0cu.2112_b20220316	cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:::::::*
totolink	ex1800t	-	cpe:2.3:h:totolink:ex1800t:-:::::::*

References

815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031NTPSyncWithHost-host_time/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Related for CVE-2023-51023