Ex200 (Totolink) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-07-09. Vendor: Totolink.

CVEs of Ex200

• CVE-2026-15271 - CVSS 7.7 (high), 2026-07-09: A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue…
• CVE-2024-7336 - CVSS 8.8 (high), 2024-08-01: A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file…
• CVE-2024-7335 - CVSS 8.8 (high), 2024-08-01: A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file…
• CVE-2024-31810 - CVSS 9.8 (critical), 2024-05-14: TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
• CVE-2024-32326 - CVSS 6.8 (medium), 2024-04-18: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
• CVE-2024-32325 - CVSS 2.4 (low), 2024-04-18: TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function.
• CVE-2024-31817 - CVSS 7.5 (high), 2024-04-08: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg.