CVE-2023-29802 - TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function

Back Back to CVE browser

CRITICAL

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function

Published Apr 14, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 2.01%

Description

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-33340
Advisory
https://sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-33340		Advisory
https://sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 14, 2023

Updated Feb 6, 2025

Reserved Apr 7, 2023

Link CVE-2023-29802

CISA Vulnrichment

Updated Feb 6, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-29802

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 14, 2023

Updated Feb 6, 2025

Link EUVD-2023-33340

GitHub

No data