CVE-2023-26848: Command Injection
Published Apr 7, 2023
·Updated
TOTOlink A7100RU(V7.4cu.2313B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Apr 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for TOTOlink A7100RU(V7.4cu.2313_B20191024)?
The vulnerability ID for TOTOlink A7100RU(V7.4cu.2313_B20191024) is CVE-2023-26848.
2
What is the severity level of CVE-2023-26848?
The severity level of CVE-2023-26848 is critical with a score of 9.8.
3
What is the affected software for CVE-2023-26848?
The affected software for CVE-2023-26848 is Totolink A7100ru Firmware version 7.4cu.2313_b20191024.
4
What is the CWE number associated with CVE-2023-26848?
The CWE number associated with CVE-2023-26848 is CWE-77.
5
Is TOTOlink A7100RU(V7.4cu.2313_B20191024) vulnerable to CVE-2023-26848?
Yes, TOTOlink A7100RU(V7.4cu.2313_B20191024) is vulnerable to CVE-2023-26848.