Filtered by vendor Totolink Subscriptions
Filtered by product Ex1200t Subscriptions
Total 15 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-52032 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
CVE-2022-25008 1 Totolink 4 Ex1200t, Ex1200t Firmware, Ex300 V2 and 1 more 2024-11-21 8.8 High
totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
CVE-2021-42893 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 7.5 High
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.
CVE-2021-42892 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 4.3 Medium
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.
CVE-2021-42891 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 7.5 High
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
CVE-2021-42890 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
CVE-2021-42889 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 7.5 High
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.
CVE-2021-42888 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
CVE-2021-42887 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2021-42886 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 7.5 High
TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file.
CVE-2021-42885 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
CVE-2021-42884 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
CVE-2021-42877 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 7.5 High
TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVE-2021-42875 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVE-2021-42872 1 Totolink 2 Ex1200t, Ex1200t Firmware 2024-11-21 9.8 Critical
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.