← Back to browse · API

CVE-2023-30013

Severity
CRITICAL
CVSS
9.8
EPSS
0.25889
Risk score
48.26
CISA KEV
No
PoC
No
Published
2023-05-05
Modified
2025-01-29
First seen
2026-08-07
Aliases
EUVD-2023-34447, GHSA-M2JR-P4MQ-JG77
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-34447

Description

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

References