CVE-2023-33556

CriticalCVSS 9.8

Published: 07/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.96%

78th percentile - higher than 78% of all known CVEs

Summary

The TOTOLink A7100RU device in version V7.4cu.2313_B20191024 was found to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.

Risk Assessment

Exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the device, posing a serious threat to network security.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg.