Ex1200t Firmware (Totolink) - vulnerabilities (CVEs)

37 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-08-13. Vendor: Totolink.

CVEs of Ex1200t Firmware

CVE-2025-51451 - CVSS 9.8 (critical), 2025-08-13: In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2025-6568 - CVSS 8.8 (high), 2025-06-24: A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file…
CVE-2025-6393 - CVSS 8.8 (high), 2025-06-21: A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T…
CVE-2025-6336 - CVSS 8.8 (high), 2025-06-20: A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file…
CVE-2025-6302 - CVSS 8.8 (high), 2025-06-20: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is the function setStaticDhcpConfig of the…
CVE-2025-6162 - CVSS 8.8 (high), 2025-06-17: A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown…
CVE-2025-6143 - CVSS 8.8 (high), 2025-06-16: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file…
CVE-2025-6145 - CVSS 8.8 (high), 2025-06-16: A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknown functionality of the…
CVE-2025-6144 - CVSS 8.8 (high), 2025-06-16: A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown…
CVE-2025-6130 - CVSS 8.8 (high), 2025-06-16: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some unknown processing of…
CVE-2025-6128 - CVSS 8.8 (high), 2025-06-16: A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This affects an unknown part of the file…
CVE-2025-6129 - CVSS 8.8 (high), 2025-06-16: A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file…
CVE-2025-5911 - CVSS 8.8 (high), 2025-06-10: A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknown functionality of…
CVE-2025-5910 - CVSS 8.8 (high), 2025-06-10: A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown…
CVE-2025-5909 - CVSS 8.8 (high), 2025-06-10: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected is an unknown function of the file…
CVE-2025-5908 - CVSS 8.8 (high), 2025-06-10: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some unknown processing…
CVE-2025-5907 - CVSS 8.8 (high), 2025-06-10: A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file…
CVE-2025-5793 - CVSS 8.8 (high), 2025-06-06: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file…
CVE-2025-5792 - CVSS 8.8 (high), 2025-06-06: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some unknown processing of…
CVE-2025-5600 - CVSS 9.8 (critical), 2025-06-04: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg…
CVE-2025-28038 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the…
CVE-2025-28039 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the…
CVE-2023-52032 - CVSS 9.8 (critical), 2024-01-11: TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
CVE-2021-42893 - CVSS 7.5 (high), 2022-06-03: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.
CVE-2021-42892 - CVSS 4.3 (medium), 2022-06-03: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.
CVE-2021-42891 - CVSS 7.5 (high), 2022-06-03: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
CVE-2021-42889 - CVSS 7.5 (high), 2022-06-03: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.
CVE-2021-42890 - CVSS 9.8 (critical), 2022-06-03: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime…
CVE-2021-42888 - CVSS 9.8 (critical), 2022-06-03: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType…
CVE-2021-42886 - CVSS 7.5 (high), 2022-06-03: TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization,…
CVE-2021-42887 - CVSS 9.8 (critical), 2022-06-03: In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2021-42885 - CVSS 9.8 (critical), 2022-06-03: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName…
CVE-2021-42884 - CVSS 9.8 (critical), 2022-06-03: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control…
CVE-2021-42877 - CVSS 7.5 (high), 2022-06-02: TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the…
CVE-2021-42875 - CVSS 9.8 (critical), 2022-06-02: TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to…
CVE-2021-42872 - CVSS 9.8 (critical), 2022-06-02: TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVE-2022-25008 - CVSS 8.8 (high), 2022-03-30: totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.