CVE-2023-27135: Command Injection
Published Mar 23, 2023
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Mar 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this TOTOlink A7100RU vulnerability?
The vulnerability ID for this TOTOlink A7100RU vulnerability is CVE-2023-27135.
2
What is the severity of CVE-2023-27135?
The severity of CVE-2023-27135 is critical with a CVSS score of 9.8.
3
What is the affected software for CVE-2023-27135?
The affected software for CVE-2023-27135 is TOTOlink A7100RU version 7.4cu.2313_B20191024.
4
What is the CWE category for CVE-2023-27135?
The CWE category for CVE-2023-27135 is CWE-77 (Improper Neutralization of Special Elements used in a Command).
5
Is there a fix available for CVE-2023-27135?
There is currently no fix available for CVE-2023-27135. It is recommended to apply security best practices and mitigate the risk.