CVE-2023-37173: OS Command Injection
Published Jul 7, 2023
·Updated
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.
Affected Software
4 affected components
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
All of the following
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
Event History
Jul 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-37173.
2
What is the severity of CVE-2023-37173?
The severity of CVE-2023-37173 is critical with a CVSS score of 9.8.
3
How does CVE-2023-37173 affect the TOTOLINK A3300R firmware?
CVE-2023-37173 affects TOTOLINK A3300R firmware version 17.0.0cu.557_B20221024.
4
What is the vulnerability in TOTOLINK A3300R firmware?
The vulnerability in TOTOLINK A3300R firmware is a command injection vulnerability via the command parameter in the setTracerouteCfg function.
5
How can I fix CVE-2023-37173?
To fix CVE-2023-37173, it is recommended to update the TOTOLINK A3300R firmware to a version that has patched the vulnerability.