Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex200_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx200 Firmware (3f18609c-c72e-5be1-b580-db8267e7b35c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-114382 vulnerable 2026-11-03 10:15:53.295279 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
CRITICAL (10)
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-10-21T21:30:10.698Z
Updated: 2026-10-28T01:59:47.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114383 vulnerable 2026-11-03 10:15:52.779412 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
CRITICAL (10)
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-10-21T21:45:18.906Z
Updated: 2026-10-28T18:28:02.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11620 vulnerable 2026-07-29 00:23:31.515731 TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation
MEDIUM (5.3)
A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-09T02:45:10.490Z
Updated: 2026-06-09T16:00:26.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.