Lucene search
HistoryJan 11, 2024 - 4:15 p.m.
CVE-2024-22942
totolink
a3300r
v17.0.0cu.557_b20221024
command injection
vulnerability
setwancfg function
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.085
Percentile
94.6%
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function.
Affected configurations
Node
totolinka3300rMatch-
totolinka3300r_firmwareMatch17.0.0cu.557_b20221024
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | a3300r | - | cpe:2.3:h:totolink:a3300r:-:*:*:*:*:*:*:* |
| totolink | a3300r_firmware | 17.0.0cu.557_b20221024 | cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.557_b20221024:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-22942
2024-01-11 00:00:00
prion
prion
Command injection
2024-01-11 16:15:00
cve
cve
CVE-2024-22942
2024-01-11 16:15:55
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.085
Percentile
94.6%
Related for NVD:CVE-2024-22942