CVE-2023-31729

CriticalCVSS 9.8

Published: 18/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.38%

69th percentile - higher than 69% of all known CVEs

Summary

TOTOLINK A3300R router firmware v17.0.0cu.557 is vulnerable to Command Injection via the /cgi-bin/cstecgi.cgi CGI script. An attacker can remotely execute arbitrary system commands without authentication.

Risk Assessment

The risk for the organization is the potential for an unauthenticated attacker to gain full control over the router, leading to network confidentiality and integrity breaches.

Recommendation

It is recommended to immediately update the TOTOLINK A3300R firmware to the latest available version and restrict management interface access to trusted networks only.

Original NVD description (English source)

TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.