CVE-2023-52029

Summary

CVE-2023-52029 is a newly disclosed remote command execution (RCE) vulnerability affecting TOTOlink A3700R v9.1.2u.5822_B20200513. An attacker can exploit this flaw by manipulating the setDiagnosisCfg function, allowing them to execute arbitrary commands on the targeted system remotely. Successful exploitation could result in unauthorized access, data theft, or system damage. Users are strongly advised to update their TOTOlink A3700R firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.