CVE-2023-24236: Command Injection

Published Feb 16, 2023

Updated

TOTOlink A7100RU(V7.4cu.2313B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules.

Affected Software

4 affected components

TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024

TOTOLINK A7100RU

All of the following

TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024

TOTOLINK A7100RU

Event History

Feb 16, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-24236?

CVE-2023-24236 is a command injection vulnerability found in TOTOlink A7100RU(V7.4cu.2313_B20191024) routers.

How severe is CVE-2023-24236?

CVE-2023-24236 is classified as critical with a severity value of 9.8.

How does CVE-2023-24236 affect TOTOlink A7100RU(V7.4cu.2313_B20191024) routers?

CVE-2023-24236 allows an attacker to execute arbitrary commands on the affected routers via the 'province' parameter in the 'setting/delStaticDhcpRules' feature.

Is TOTOlink A7100RU(V7.4cu.2313_B20191024) the only affected software?

No, TOTOlink A7100RU(V7.4cu.2313_B20191024) is the only affected software, but TOTOlink A7100RU is not vulnerable to this issue.

How can I fix CVE-2023-24236?

To fix CVE-2023-24236, update your TOTOlink A7100RU(V7.4cu.2313_B20191024) router to a version that addresses the command injection vulnerability.

CVE-2023-24236: Command Injection

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2023-24236?

How severe is CVE-2023-24236?

How does CVE-2023-24236 affect TOTOlink A7100RU(V7.4cu.2313_B20191024) routers?

Is TOTOlink A7100RU(V7.4cu.2313_B20191024) the only affected software?

How can I fix CVE-2023-24236?

Company

Resources

Contact