CVE-2021-45733: Command Injection
Published Feb 4, 2022
·Updated
TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter hosttime.
Affected Software
2 affected components
TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102
TOTOLINK X5000R
Event History
Feb 4, 2022
CVE Published
via MITRE·01:34 AM
Data Sourced
via MITRE·01:34 AM
Description
Frequently Asked Questions
1
What is CVE-2021-45733?
CVE-2021-45733 is a command injection vulnerability found in TOTOLINK X5000R v9.1.0u.6118_B20201102 firmware.
2
How severe is CVE-2021-45733?
CVE-2021-45733 has a severity rating of 9.8, which is considered critical.
3
What is the affected software version for CVE-2021-45733?
TOTOLINK X5000R v9.1.0u.6118_B20201102 firmware is affected by CVE-2021-45733.
4
How can an attacker exploit CVE-2021-45733?
An attacker can exploit CVE-2021-45733 by executing arbitrary commands through the "host_time" parameter.
5
Is there a fix available for CVE-2021-45733?
At the moment, there is no known fix available for CVE-2021-45733. It is recommended to monitor the vendor's website for updates or apply any patches provided.