CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-24142

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 82.3%

CVSS Severity

CVSS v3 Score 9.8

References

https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingSize/setNetworkDiag_NetDiagPingSize.md
https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingSize/setNetworkDiag_NetDiagPingSize.md

Products affected by CVE-2023-24142

Totolink » Ca300-Poe » Version: N/A

cpe:2.3:h:totolink:ca300-poe:-
Totolink » Ca300-Poe Firmware » Version: 6.2c.884

cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24142

Products

Pricing

Contact Us