CVE-2023-30013: OS Command Injection
Published May 5, 2023
·Updated
TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.
Affected Software
6 affected components
TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102
TOTOLINK X5000r Firmware=9.1.0u.6369_b20230113
TOTOLINK X5000R
All of the following
Any of the following
TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102
TOTOLINK X5000r Firmware=9.1.0u.6369_b20230113
TOTOLINK X5000R
Event History
May 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
02:15 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-30013?
The severity of CVE-2023-30013 is critical.
2
How does CVE-2023-30013 affect TOTOLINK X5000R firmware version 9.1.0u.6118_B20201102?
TOTOLINK X5000R firmware version 9.1.0u.6118_B20201102 is affected by CVE-2023-30013.
3
How does CVE-2023-30013 affect TOTOLINK X5000R firmware version 9.1.0u.6369_B20230113?
TOTOLINK X5000R firmware version 9.1.0u.6369_B20230113 is affected by CVE-2023-30013.
4
What is the command insertion vulnerability in CVE-2023-30013?
The command insertion vulnerability in CVE-2023-30013 is in the setting/setTracerouteCfg function.
5
How can an attacker exploit CVE-2023-30013?
An attacker can exploit CVE-2023-30013 by executing arbitrary commands through the "command" parameter.