TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.
References
Configurations
Configuration 1 (hide)
AND |
|
History
07 Mar 2024, 20:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | (en) TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. |
25 May 2023, 17:37
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://github.com/D2y6p/CVE/blob/main/Totolink/CVE-2023-31729/CVE-2023-31729.md - Broken Link | |
References | (MISC) http://totolink.com - Product | |
CWE | CWE-77 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CPE | cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.557:*:*:*:*:*:*:* cpe:2.3:h:totolink:a3300r:-:*:*:*:*:*:*:* |
18 May 2023, 02:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-18 02:15
Updated : 2024-03-07 20:15
NVD link : CVE-2023-31729
Mitre link : CVE-2023-31729
CVE.ORG link : CVE-2023-31729
JSON object : View
Products Affected
totolink
- a3300r_firmware
- a3300r
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')