Critical severity9.8NVD Advisory· Published Dec 22, 2023· Updated Jun 17, 2026

CVE-2023-50147

Description

There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router device in its firmware version V9.1.2u.5822_B20200513.

Affected products

Totolink/A3700r Firmware
cpe:2.3:o:totolink:a3700r_firmware:9.1.2u.5822_b20200513:*:*:*:*:*:*:*
TOTOlink/A3700R routerdescription
Totolink/A3700Rllm-fuzzy
Range: V9.1.2u.5822_B20200513

Patches

Vulnerability mechanics

References

815yang.github.io/2023/12/04/a3700r/TOTOlink%20A3700R%28setDiagnosisCfg%29/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000