CVE-2021-42872

CRITICAL

Totolink Ex1200t Firmware - OS Command Injection

Title source: rule
STIX 2.1

Description

TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
http://totolink.net/
Broken Link, URL Repurposed x_refsource_misc
http://ex1200t.com

Scores

CVSS v3 9.8
EPSS 0.1141
EPSS Percentile 93.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
totolink/ex1200t_firmware 4.1.2cu.5215
Published Jun 02, 2022
Tracked Since Feb 18, 2026