Vulnerabilities (CVE)

Filtered by vendor Totolink Subscribe
Filtered by product Ex1200t Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42875 1 Totolink 2 Ex1200t, Ex1200t Firmware 2023-08-08 10.0 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVE-2021-42888 1 Totolink 2 Ex1200t, Ex1200t Firmware 2023-08-08 7.5 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
CVE-2021-42884 1 Totolink 2 Ex1200t, Ex1200t Firmware 2023-08-08 7.5 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
CVE-2021-42890 1 Totolink 2 Ex1200t, Ex1200t Firmware 2023-08-08 7.5 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
CVE-2021-42885 1 Totolink 2 Ex1200t, Ex1200t Firmware 2023-08-08 7.5 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
CVE-2021-42887 1 Totolink 2 Ex1200t, Ex1200t Firmware 2022-06-13 7.5 HIGH 9.8 CRITICAL
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2021-42872 1 Totolink 2 Ex1200t, Ex1200t Firmware 2022-06-09 10.0 HIGH 9.8 CRITICAL
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.