CVE-2023-51028

2023-12-2200:00:00

mitre

www.cve.org

totolink ex1800t

unauthorized access

command execution

cstecgi.cgi

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.

References

815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliChannel/