CVE-2023-51034

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-12-22

Last modified

2024-09-09

Weaknesses

CWE-434

Affected products

• Ex1200l Firmware (Totolink)

References

• https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_UploadFirmwareFile/