CVE-2023-26978

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-04-07

Last modified

2025-02-12

Weaknesses

CWE-77

Affected products

• A7100ru Firmware (Totolink)

References

• https://github.com/Am1ngl/ttt/tree/main/28