CVE-2025-51451

In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2025-08-13

Last modified

2026-07-05

Weaknesses

CWE-287

Affected products

• Ex1200t Firmware (Totolink)

References

• https://gist.github.com/lin-3-start/e42344d5caea881e5429fdd40fad1fd8
• https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/204/ids/36.html