CVE-2023-46976: Command Injection
Published Oct 31, 2023
·Updated
TOTOLINK A3300R 17.0.0cu.557B20221024 contains a command injection via the filename parameter in the UploadFirmwareFile function.
Affected Software
2 affected components
All of the following
TOTOLINK A3300R firmware=17.0.0cu.557_b20221024
TOTOLINK A3300R
Event History
Oct 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-46976?
CVE-2023-46976 is a vulnerability found in TOTOLINK A3300R 17.0.0cu.557_B20221024 firmware that allows command injection via the file_name parameter in the UploadFirmwareFile function.
2
How severe is CVE-2023-46976?
CVE-2023-46976 has a severity rating of 9.8 (Critical).
3
What is the affected software for CVE-2023-46976?
The affected software for CVE-2023-46976 is TOTOLINK A3300R 17.0.0cu.557_B20221024 firmware.
4
How can CVE-2023-46976 be exploited?
CVE-2023-46976 can be exploited by injecting commands via the file_name parameter in the UploadFirmwareFile function.
5
Is TOTOLINK A3300R vulnerable to CVE-2023-46976?
No, TOTOLINK A3300R is not vulnerable to CVE-2023-46976.