CVE-2023-46993

published 2023-10-31

CVE-2023-46993: In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	a3300r_firmware	—	—

CWE-77