CVE-2023-26978: Command Injection
Published Apr 7, 2023
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Apr 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this TOTOlink A7100RU vulnerability?
The vulnerability ID is CVE-2023-26978.
2
What is the severity of CVE-2023-26978?
The severity of CVE-2023-26978 is critical with a score of 9.8.
3
How does the command injection vulnerability occur in TOTOlink A7100RU?
The command injection vulnerability occurs via the pppoeAcName parameter at /setting/setWanIeCfg.
4
What is the affected software version with the command injection vulnerability?
The affected software version is TOTOlink A7100RU V7.4cu.2313_B20191024.
5
Is TOTOlink A7100RU V7.4cu.2313_B20191024 currently vulnerable?
Yes, TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to the command injection vulnerability.