CVE-2023-37172: OS Command Injection
Published Jul 7, 2023
·Updated
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.
Affected Software
4 affected components
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
All of the following
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
Event History
Jul 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-37172?
CVE-2023-37172 is a command injection vulnerability discovered in TOTOLINK A3300R V17.0.0cu.557_B20221024 firmware.
2
How severe is CVE-2023-37172?
CVE-2023-37172 has a severity rating of 9.8, which is considered critical.
3
What software is affected by CVE-2023-37172?
TOTOLINK A3300R V17.0.0cu.557_B20221024 firmware is affected by CVE-2023-37172.
4
How can I fix CVE-2023-37172?
Currently, there is no official fix available for CVE-2023-37172. It is recommended to update to a patched version of TOTOLINK A3300R firmware when it becomes available.
5
Is TOTOLINK A3300R vulnerable to CVE-2023-37172?
TOTOLINK A3300R is vulnerable to CVE-2023-37172 if it is running the affected firmware version 17.0.0cu.557_B20221024.