CVE-2023-37148: Command Injection
Published Jul 7, 2023
·Updated
TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.
Affected Software
4 affected components
TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309
TOTOLINK LR350
All of the following
TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309
TOTOLINK LR350
Event History
Jul 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-37148?
CVE-2023-37148 is a command injection vulnerability found in TOTOLINK LR350 V9.3.5u.6369_B20220309 firmware.
2
How severe is CVE-2023-37148?
CVE-2023-37148 has a severity level of 9.8, which is considered critical.
3
What software versions are affected by CVE-2023-37148?
TOTOLINK LR350 V9.3.5u.6369_B20220309 firmware is affected by CVE-2023-37148.
4
How do I fix CVE-2023-37148?
To fix CVE-2023-37148, it is recommended to update the TOTOLINK LR350 firmware to a version that is not vulnerable.
5
What is the Common Weakness Enumeration (CWE) of CVE-2023-37148?
The Common Weakness Enumeration (CWE) of CVE-2023-37148 is CWE-77, which is an improper neutralization of special elements used in a command vulnerability.