Lucene search

MitreCVE-2023-51035

HistoryDec 22, 2023 - 7:15 p.m.

CVE-2023-51035

2023-12-2219:15:09

CWE-78

mitre

web.nvd.nist.gov

cve-2023-51035

totolink

ex1200l

vulnerability

arbitrary command execution

cstecgi.cgi

ntpsyncwithhost

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.

Affected configurations

Nvd

Node

totolinkex1200l_firmwareMatch9.3.5u.6146_b20201023

AND

totolinkex1200lMatch-

VendorProductVersionCPE
totolinkex1200l_firmware9.3.5u.6146_b20201023cpe:2.3:o:totolink:ex1200l_firmware:9.3.5u.6146_b20201023:*:*:*:*:*:*:*
totolinkex1200l-cpe:2.3:h:totolink:ex1200l:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	ex1200l_firmware	9.3.5u.6146_b20201023	cpe:2.3:o:totolink:ex1200l_firmware:9.3.5u.6146_b20201023:::::::*
totolink	ex1200l	-	cpe:2.3:h:totolink:ex1200l:-:::::::*

References

815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_NTPSyncWithHost/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

Related for CVE-2023-51035