Sign-up

ID

VAR-202306-0330


CVE

CVE-2023-31569


TITLE

TOTOLINK X5000R Command injection vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202306-371

DESCRIPTION

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.

Trust: 1.0

sources: NVD: CVE-2023-31569

AFFECTED PRODUCTS

vendor:totolinkmodel:x5000rscope:eqversion:9.1.0cu.2350_b20230313

Trust: 1.0

sources: NVD: CVE-2023-31569

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-31569
value: CRITICAL

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-31569
value: CRITICAL

Trust: 1.0

CNNVD: CNNVD-202306-371
value: CRITICAL

Trust: 0.6

nvd@nist.gov: CVE-2023-31569
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 2.0

sources: CNNVD: CNNVD-202306-371 // NVD: CVE-2023-31569 // NVD: CVE-2023-31569

PROBLEMTYPE DATA

problemtype:CWE-77

Trust: 1.0

sources: NVD: CVE-2023-31569

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202306-371

TYPE

command injection

Trust: 0.6

sources: CNNVD: CNNVD-202306-371

EXTERNAL IDS

db:NVDid:CVE-2023-31569

Trust: 1.6

db:CNNVDid:CNNVD-202306-371

Trust: 0.6

sources: CNNVD: CNNVD-202306-371 // NVD: CVE-2023-31569

REFERENCES

url:https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/218.html

Trust: 1.6

url:https://github.com/jeeseensec/report/tree/main/totolink/cve-2023-31569

Trust: 1.6

url:http://totolink.com

Trust: 1.6

url:https://github.com/jeeseensec/report/tree/main/totolink%2cthanks

Trust: 1.0

url:https://cxsecurity.com/cveshow/cve-2023-31569/

Trust: 0.6

sources: CNNVD: CNNVD-202306-371 // NVD: CVE-2023-31569

SOURCES

db:CNNVDid:CNNVD-202306-371
db:NVDid:CVE-2023-31569

LAST UPDATE DATE

2025-01-08T23:09:15.270000+00:00


SOURCES UPDATE DATE

db:CNNVDid:CNNVD-202306-371date:2023-06-13T00:00:00
db:NVDid:CVE-2023-31569date:2025-01-08T16:15:29.143

SOURCES RELEASE DATE

db:CNNVDid:CNNVD-202306-371date:2023-06-06T00:00:00
db:NVDid:CVE-2023-31569date:2023-06-06T14:15:12.427