CVE-2023-37149

2023-07-0700:00:00

mitre

www.cve.org

totolink lr350

v9.3.5u.6369_b20220309

command injection

vulnerability

filename parameter

setuploadsetting function

EPSS

0.556

Percentile

97.7%

JSON

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.

References

github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/4/README.md

EPSS

0.556

Percentile

97.7%

JSON

Related for CVELIST:CVE-2023-37149