CVE-2023-27229: Command Injection
Published Mar 28, 2023
·Updated
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Mar 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-27229?
CVE-2023-27229 is a command injection vulnerability found in TOTOlink A7100RU V7.4cu.2313_B20191024 firmware.
2
How severe is CVE-2023-27229?
CVE-2023-27229 has a severity score of 9.8 out of 10, making it a critical vulnerability.
3
How does CVE-2023-27229 affect TOTOlink A7100RU?
CVE-2023-27229 affects TOTOlink A7100RU V7.4cu.2313_B20191024 firmware.
4
What is the CWE ID for CVE-2023-27229?
The CWE ID for CVE-2023-27229 is CWE-77, which represents Improper Neutralization of Special Elements used in a Command ('Command Injection').
5
Is there a fix for CVE-2023-27229?
To fix CVE-2023-27229, it is recommended to update your TOTOlink A7100RU firmware to a version that is not vulnerable.