Lucene search
HistoryApr 14, 2023 - 2:15 p.m.
CVE-2023-29802
totolink x18
v9.1.0cu.2024_b20220329
command injection
vulnerability
setdiagnosiscfg function
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.545
Percentile
97.7%
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.
Affected configurations
Node
totolinkx18_firmwareMatch9.1.0cu.2021_b20220326
ORtotolinkx18_firmwareMatch9.1.0cu.2024_b20220329
totolinkx18Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | x18_firmware | 9.1.0cu.2021_b20220326 | cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2021_b20220326:*:*:*:*:*:*:* |
| totolink | x18_firmware | 9.1.0cu.2024_b20220329 | cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2024_b20220329:*:*:*:*:*:*:* |
| totolink | x18 | - | cpe:2.3:h:totolink:x18:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-29802
2023-04-14 14:15:11
prion
prion
Command injection
2023-04-14 14:15:00
cvelist
cvelist
CVE-2023-29802
2023-04-14 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.545
Percentile
97.7%
Related for NVD:CVE-2023-29802