CVE-2023-4411
MediumCVSS 6.3Exploitation Probability (EPSS)
Very high risk90th percentile - higher than 90% of all known CVEs
Summary
A critical vulnerability has been found in the TOTOLINK EX1200L device version EN_V9.3.5u.6146_B20201023, affecting the setTracerouteCfg function. Manipulation of this function leads to remote OS command injection.
Risk Assessment
This vulnerability allows for remote exploitation, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to immediately update the device firmware to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.