CVE-2023-52028 - TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function

CRITICAL

TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function

Published Jan 11, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.67%

TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R_setTracerouteCfg/		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56707		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 11, 2024

Updated Jun 20, 2025

Reserved Dec 26, 2023

Updated Jan 11, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 11, 2024

Updated Jun 20, 2025

Exploited since n/a