CVE-2023-29798: Command Injection
Published Apr 14, 2023
·Updated
TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.
Affected Software
4 affected components
All of the following
TOTOLINK X18 Firmware=9.1.0cu.2024_b20220329
TOTOLINK X18
TOTOLINK X18 Firmware=9.1.0cu.2024_b20220329
TOTOLINK X18
Event History
Apr 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for TOTOLINK X18?
The vulnerability ID for TOTOLINK X18 is CVE-2023-29798.
2
What is the severity of CVE-2023-29798?
The severity of CVE-2023-29798 is critical.
3
What is the affected software for CVE-2023-29798?
The affected software for CVE-2023-29798 is TOTOLINK X18 Firmware version 9.1.0cu.2024_B20220329.
4
What is the CWE category for CVE-2023-29798?
The CWE category for CVE-2023-29798 is CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
5
How do I fix the command injection vulnerability in TOTOLINK X18?
To fix the command injection vulnerability in TOTOLINK X18, update to a patched version of TOTOLINK X18 Firmware.