CRITICAL

CVE-2023-30013

CVSS v3

9.8

CRITICAL

EPSS Score

92.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

Technical details

Published
5/5/2023

Frequently asked questions

What is CVE-2023-30013?

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

Is CVE-2023-30013 actively exploited?

Active exploitation of CVE-2023-30013 has not been confirmed. The EPSS score is 92.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-30013?

CVE-2023-30013 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2023-30013 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2023 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database