TOTOLINK rtLogServer CVE-2023-29801 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2023-29801
• https://cve.imfht.com/detail/CVE-2023-29801
• https://strobes.co/vi/cve/CVE-2023-29801/
• https://nvd.nist.gov/vuln/detail/CVE-2023-29801
• https://www.cyberhub.blog/cves/CVE-2023-29801
• https://access.redhat.com/security/cve/cve-2023-29801

Related Vulnerabilities

• TOTOLINK EX200 /cgi-bin/cstecgi.cgi setLanguageCfg 命令执行漏洞
• TOTOLINK EX200 /cgi-bin/cstecgi.cgi NTPSyncWithHost 命令执行漏洞
• PoCCVE-2018-13317: TOTOLINK A3002RU 1.0.8 - Information Disclosure
• PoCCVE-2019-19822: TOTOLINK/Realtek Routers - Information Disclosure
• PoCCVE-2019-19823: TOTOLINK/Realtek Routers - Information Disclosure
• PoCCVE-2019-19825: TOTOLINK/Realtek Routers - CAPTCHA Bypass
• PoCCVE-2019-19824: TOTOLINK Realtek SD Routers - Remote Command Injection
• PoCCVE-2021-42887: TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass
• PoCCVE-2022-25082: TOTOLink - Unauthenticated Command Injection
• PoCCVE-2023-30013: TOTOLink - Unauthenticated Command Injection
• PoCCVE-2023-46574: TOTOLINK A3700R - Command Injection
• PoCCVE-2024-24328: TotoLink Router setMacFilterRules - Command Injection
• PoCCVE-2024-24329: TotoLink Router setPortForwardRules - Command Injection