doudoudedi/ToTolink_EX200_Cmmand_Execute

Releases0

Stars5

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-43711 ↗	Jan 4, 2022Tuesday, 4 January 2022, 14:15	9.8 CRITICAL	7.5 HIGH
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.