CVE-2023-51022

Summary

CVE-2023-51022: This vulnerability affects the TOTOlink EX1800T v9.1.0cu.2112_B20220316. It allows unauthorized arbitrary command execution through the 'langFlag' parameter in the setLanguageCfg interface of the cstecgi .cgi. An attacker could exploit this vulnerability by sending specially crafted input to gain control over the targeted system, potentially leading to serious consequences such as data theft or system compromise. Users are strongly advised to update their software to a patch that addresses this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.