CVE-2023-37171: OS Command Injection
Published Jul 7, 2023
·Updated
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
Affected Software
4 affected components
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
All of the following
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
Event History
Jul 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for TOTOLINK A3300R?
The vulnerability ID for TOTOLINK A3300R is CVE-2023-37171.
2
What is the severity of CVE-2023-37171?
The severity of CVE-2023-37171 is critical with a score of 9.8.
3
What is the impacted software for CVE-2023-37171?
The impacted software for CVE-2023-37171 is TOTOLINK A3300R V17.0.0cu.557_B20221024 firmware.
4
How can the command injection vulnerability be exploited in CVE-2023-37171?
The command injection vulnerability in CVE-2023-37171 can be exploited via the admuser parameter in the setPasswordCfg function.
5
Is there a fix available for CVE-2023-37171?
There is currently no information available on a fix for CVE-2023-37171. It is recommended to follow the vendor's advisories for updates.