chibataiki/iot-vuls

Releases0

some records

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-43663 ↗	Mar 31, 2022Thursday, 31 March 2022, 00:15	7.5 HIGH	7.9 HIGH
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.
CVE-2021-43661 ↗	Mar 31, 2022Thursday, 31 March 2022, 00:15	6.1 MEDIUM	4.3 MEDIUM
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.
CVE-2021-43662 ↗	Mar 31, 2022Thursday, 31 March 2022, 00:15	6.5 MEDIUM	3.3 LOW
totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
CVE-2022-25008 ↗	Mar 30, 2022Wednesday, 30 March 2022, 23:15	8.8 HIGH	5.8 MEDIUM
totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
CVE-2021-43664 ↗	Mar 30, 2022Wednesday, 30 March 2022, 23:15	8.1 HIGH	9.3 HIGH
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.