CVE-2023-48192

HighCVSS 7.8

Published: 20/11/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

A vulnerability in the TOTOlink A3700R router firmware version 9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.

Risk Assessment

A local attacker can take control of the device, compromising the confidentiality, integrity, and availability of the network.

Recommendation

Immediately update the router firmware to the latest version and restrict local access to the device.

Other vulnerabilities in TOTOlink A3700R

CVE-2026-1143High
Vulnerability in TOTOLINK A3700R router in the setWiFiEasyGuestCfg function of /cgi-bin/cstecgi.cgi. Manipulation of the ssid argument can lead to a buffer overflow. The attack can be performed remotely, and the exploit is publicly available.

Original NVD description (English source)

An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.