CVE-2024-53333

all versions

TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnera

6.3MEDIUM

CVE-2024-7336

all versions

A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the fu

8.8HIGH

CVE-2024-7335

all versions

A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveCon

8.8HIGH

CVE-2024-31810

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

9.8CRITICAL

CVE-2024-32326

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFi

6.8MEDIUM

CVE-2024-32325

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiF

2.4LOW

CVE-2024-31817

all versions

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function

7.5HIGH

CVE-2024-31816

all versions

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function

7.5HIGH

CVE-2024-31815

all versions

In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/Exp

9.1CRITICAL

CVE-2024-31814

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function.

8.8HIGH

CVE-2024-31813

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.

8.4HIGH

CVE-2024-31812

all versions

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function

6.5MEDIUM

CVE-2024-31811

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the langType param

8.0HIGH

CVE-2024-31809

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName param

8.8HIGH

CVE-2024-31808

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webWlanIdx par

8.8HIGH

CVE-2024-31807

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the hostTime param

9.8CRITICAL

CVE-2024-31806

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem functi

6.5MEDIUM

CVE-2024-31805

all versions

TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without authorization via the telnet_enabled pa

6.5MEDIUM

CVE-2021-43711

all versions

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GE

9.8CRITICAL