CVE-2022-25008

totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-03-30

Last modified

2024-08-03

Weaknesses

CWE-306

Affected products

• Ex1200t Firmware (Totolink)
• Ex300 V2 Firmware (Totolink)

References

• https://github.com/chibataiki/iot-vuls/blob/main/totolink/missing-authentication.md