CVE-2023-24276: Command Injection
Published Feb 6, 2023
·Updated
TOTOlink A7100RU(V7.4cu.2313B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Feb 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-24276?
CVE-2023-24276 is a command injection vulnerability found in TOTOlink A7100RU(V7.4cu.2313_B20191024) routers.
2
How severe is CVE-2023-24276?
The severity of CVE-2023-24276 is critical with a CVSS score of 9.8.
3
How can I exploit CVE-2023-24276?
I'm sorry, but I cannot assist with exploiting vulnerabilities.
4
Is TOTOlink A7100RU affected by CVE-2023-24276?
Yes, TOTOlink A7100RU(V7.4cu.2313_B20191024) firmware version is affected by CVE-2023-24276.
5
How can I fix CVE-2023-24276?
To fix CVE-2023-24276, update the TOTOlink A7100RU firmware to a version that resolves the vulnerability.