PT-2023-3156 · Totolink · Totolink X18

Published 2023-04-14 · Updated 2023-04-21 · CVE-2023-29800

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TOTOLINK X18 version V9.1.0cu.2024 B20220329

Description The issue is related to insufficient argument validation in the UploadFirmwareFile function of the TOTOLINK X18 router's firmware, allowing a remote attacker to execute arbitrary commands using the FileName parameter.

Recommendations For TOTOLINK X18 version V9.1.0cu.2024 B20220329, as a temporary workaround, consider restricting access to the UploadFirmwareFile function until a patch is available. Avoid using the FileName parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2023-03255

CVE-2023-29800

Affected Products

Totolink X18

References · 5

• 🔥 https://sore-pail-31b.notion.site/Command-Injection-5-e88b72309a3c4e20b7469b3679c0c7d9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-29800 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29800 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03255 · Security Note
• https://t.me/cvenotify/48850 · Telegram Post