CVE-2023-51023

Summary

CVE-2023-51023: A critical vulnerability has been identified in TOTOlink EX1800T v9.1.0cu.2112_B20220316. Hackers can exploit this issue by sending malicious input to the 'host_time' parameter in the NTPSyncWithHost interface of the cstecgi .cgi, leading to arbitrary command execution. This flaw poses a significant risk, as attackers may gain unauthorized access to the affected system and execute potentially harmful code. Users are strongly encouraged to update their TOTOlink EX1800T devices as soon as a patch becomes available to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.