Lucene search

MitreCVE-2023-51024

HistoryDec 22, 2023 - 6:15 p.m.

CVE-2023-51024

2023-12-2218:15:07

mitre

web.nvd.nist.gov

cve-2023-51024

totolink

ex1800t

command execution

vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.

Affected configurations

Nvd

Node

totolinkex1800t_firmwareMatch9.1.0cu.2112_b20220316

AND

totolinkex1800tMatch-

VendorProductVersionCPE
totolinkex1800t_firmware9.1.0cu.2112_b20220316cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:*:*:*:*:*:*:*
totolinkex1800t-cpe:2.3:h:totolink:ex1800t:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1800t_firmware	9.1.0cu.2112_b20220316	cpe:2.3:o:totolink:ex1800t_firmware:9.1.0cu.2112_b20220316:::::::*
totolink	ex1800t	-	cpe:2.3:h:totolink:ex1800t:-:::::::*

References

815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setNtpCfg-tz/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Related for CVE-2023-51024