CVE-2023-24148: Command Injection
Published Feb 3, 2023
·Updated
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.
Affected Software
4 affected components
TOTOLINK Ca300-poe Firmware=6.2c.884
TOTOLINK CA300-PoE
All of the following
TOTOLINK Ca300-poe Firmware=6.2c.884
TOTOLINK CA300-PoE
Event History
Feb 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-24148?
CVE-2023-24148 is a command injection vulnerability found in TOTOLINK CA300-PoE V6.2c.884 firmware.
2
How severe is CVE-2023-24148?
CVE-2023-24148 has a severity rating of 9.8 (Critical).
3
What is the affected software of CVE-2023-24148?
TOTOLINK CA300-PoE V6.2c.884 firmware is affected by CVE-2023-24148.
4
How does CVE-2023-24148 exploit the vulnerability?
CVE-2023-24148 exploits the vulnerability through the FileName parameter in the setUploadUserData function.
5
Is there a fix available for CVE-2023-24148?
A fix for CVE-2023-24148 has not been provided at the time of this writing. It is recommended to contact TOTOLINK for further information.