CVE-2023-4410

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
TOTOLINKEX1200LEN_V9.3.5u.6146_B20201023

References

Timeline

Published
Aug 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-441007.5Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidenCVE-2023-441017.5The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability mayCVE-2023-441025.3Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth funCVE-2023-441037.5Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-441047.5Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidenCVE-2023-441059.8Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cCVE-2023-441069.8API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perforCVE-2023-441079.1Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may CVE-2023-441087.5Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-441097.5Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44119.8A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the funcCVE-2023-441104.3Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.
CVE-2023-4410: Critical severity, CVSS 9.8 | Vulnix