CVE-2023-33556: Command Injection
Published Jun 7, 2023
·Updated
TOTOLink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.
Affected Software
4 affected components
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
All of the following
TOTOLINK A7100ru Firmware=7.4cu.2313_b20191024
TOTOLINK A7100RU
Event History
Jun 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for TOTOLink A7100RU?
The vulnerability ID for TOTOLink A7100RU is CVE-2023-33556.
2
What is the severity of CVE-2023-33556?
The severity of CVE-2023-33556 is critical, with a severity value of 9.8.
3
How does the vulnerability affect TOTOLink A7100RU firmware?
The vulnerability affects TOTOLink A7100RU firmware version 7.4cu.2313_B20191024.
4
What is the CWE ID for CVE-2023-33556?
The CWE ID for CVE-2023-33556 is CWE-77.
5
Is there a fix available for the TOTOLink A7100RU vulnerability?
It is recommended to update the TOTOLink A7100RU firmware to the latest version to mitigate the vulnerability.