CVE-2023-29801: Command Injection
TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29801?
The severity of CVE-2023-29801 is critical with a severity value of 9.8.
What is CVE-2023-29801?
CVE-2023-29801 refers to a command injection vulnerability found in TOTOLINK X18 V9.1.0cu.2024_B20220329 firmware.
How does CVE-2023-29801 affect TOTOLINK X18?
CVE-2023-29801 affects TOTOLINK X18 by allowing attackers to execute arbitrary commands via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function.
How can I fix the CVE-2023-29801 vulnerability?
To fix the CVE-2023-29801 vulnerability, it is recommended to update the TOTOLINK X18 firmware to a patched version provided by the vendor.
Where can I find more information about CVE-2023-29801?
Additional information about CVE-2023-29801 can be found at the following reference: [https://sore-pail-31b.notion.site/Command-Injection-2-af41252fe96244209589d4e6da9aa7b7]